Malware Analysis

Malware Analysis – djvu – f7e484ed4d3b204dffa616abf58a050d

February 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f7e484ed4d3b204dffa616abf58a050dSHA1: 9f6f3dae7a695dbad8f4cc28aee8daa096788bfdANALYSIS DATE: 2023-02-09T04:15:26ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – djvu – 3f6f77fbfd970422f391168b7527aacf

February 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 3f6f77fbfd970422f391168b7527aacfSHA1: c5b45b12fe9b02e29bc38a5c0ae3e4833328d23eANALYSIS DATE: 2023-02-09T05:11:53ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – efb42a578049e2b8f37be9fb852c6eba

February 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: efb42a578049e2b8f37be9fb852c6ebaSHA1: 8da552e14080ea372fdb2e7ec74b3e9567efb066ANALYSIS DATE: 2023-02-09T05:33:02ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – f31d6529ff4ad98053f9a8a9832f95e3

February 9, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f31d6529ff4ad98053f9a8a9832f95e3SHA1: abdd5ce48e2d11a4c82fc90d9e9beeb14b437ceeANALYSIS DATE: 2023-02-09T05:33:03ZTTPS: T1005, T1081, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 2280a8daff5f3edaaa91eaf2af3db70b

February 9, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2280a8daff5f3edaaa91eaf2af3db70bSHA1: 1cc443d49aed25012ae43374c05e1633f5ae1ed4ANALYSIS DATE: 2023-02-08T21:11:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 4cf9a9a6dd35e23a84488490eb10c9ff

February 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4cf9a9a6dd35e23a84488490eb10c9ffSHA1: b709bf683b5d06c201379a3c1c10cb64496162d8ANALYSIS DATE: 2023-02-08T21:08:32ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – fc09aee634702b283fde4f76ecaf8427

February 9, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fc09aee634702b283fde4f76ecaf8427SHA1: 169beecfca212d0886bf199e53b544915adba0b2ANALYSIS DATE: 2023-02-08T21:45:47ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – 15e04e8d884d3a294f7c9094700e9149

February 9, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 15e04e8d884d3a294f7c9094700e9149SHA1: d61e581e8276e639468b1edb204596975f454cafANALYSIS DATE: 2023-02-08T21:49:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – a0b64b439b2cda9875093e89c4ef7d91

February 9, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: a0b64b439b2cda9875093e89c4ef7d91SHA1: 2522faf897df5be0bc16d486b4ead39f96bf647fANALYSIS DATE: 2023-02-08T21:59:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 19ae6f2504c0cddeb4becaa8b9fc8024

February 9, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 19ae6f2504c0cddeb4becaa8b9fc8024SHA1: 744470131925e8a43889cbc1b23c0370b81fecedANALYSIS DATE: 2023-02-08T21:57:45ZTTPS: T1060, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – – 441ecc410cb1753b655789df2c7f8deb

February 9, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: 441ecc410cb1753b655789df2c7f8debSHA1: 549a397dcdd0ee2e3ff04785a087bc2c6578d5c9ANALYSIS DATE: 2023-02-08T22:18:59ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – c0c1f9d4bc9eb46e9518dd146ea7df33

February 9, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c0c1f9d4bc9eb46e9518dd146ea7df33SHA1: bdfea7acbfe3461db3910298f8d7f20592371510ANALYSIS DATE: 2023-02-08T23:51:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – e8e9ee58ef7e23b87b66bf49a3102cff

February 9, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e8e9ee58ef7e23b87b66bf49a3102cffSHA1: a7bc17b0df5033594dd75ea47d957f818400cab6ANALYSIS DATE: 2023-02-08T22:29:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 21f7c6ea1d1c19654b2f4fc32f454d54

February 9, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 21f7c6ea1d1c19654b2f4fc32f454d54SHA1: b362b995ab78a159f86b6eaf5d8a9073318eee4eANALYSIS DATE: 2023-02-08T22:48:07ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 98fc4340567cdff88b194c45b71d2c7a

February 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 98fc4340567cdff88b194c45b71d2c7aSHA1: e1e60bafa53fd2d3a9066befe46908a4c29169d2ANALYSIS DATE: 2023-02-08T23:30:33ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – conti – d69589f5bd6c3c799be2d2fd2b718af1

February 8, 2023

Score: 10 MALWARE FAMILY: contiTAGS:family:conti, ransomwareMD5: d69589f5bd6c3c799be2d2fd2b718af1SHA1: 1c68264c9b7b4fef73cc231b944388b4abaa1962ANALYSIS DATE: 2023-02-08T16:39:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – d6ad8da80809d7558c1a934e6ef28cbc

February 8, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: d6ad8da80809d7558c1a934e6ef28cbcSHA1: e627b9f49a5fbe767482544c60bfd0743548f00eANALYSIS DATE: 2023-02-08T15:16:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 1ec0d6f7d058212c7e8288cac9cc97fc

February 8, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1ec0d6f7d058212c7e8288cac9cc97fcSHA1: 3cfd8b703796e7f32365d6667a84349eb6c5b474ANALYSIS DATE: 2023-02-08T15:38:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – discovery – 662d26b4e627e44a0da5e5e99fa41942

February 8, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 662d26b4e627e44a0da5e5e99fa41942SHA1: 93ea678ba8449bfdfd7a26e82fae39f00185e8d8ANALYSIS DATE: 2023-02-08T15:34:33ZTTPS: T1102, T1082, T1057, T1012, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – lockbit – fe5101b50e92a923d74cc6f0f4225539

February 8, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: fe5101b50e92a923d74cc6f0f4225539SHA1: f7a2fc4e471a203c8a5683c02ada2c3931c8f0ecANALYSIS DATE: 2023-02-08T09:00:40ZTTPS: T1490, T1046, T1082, T1107, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – djvu – 874a8573bbe9da63a8026990fd4f7327

February 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:gozi, family:laplas, family:smokeloader, botnet:1001, backdoor, banker, clipper, discovery, isfb, persistence, ransomware, stealer, trojanMD5: 874a8573bbe9da63a8026990fd4f7327SHA1: e2a091f4398f1e54672d46abfa51b8928d9dabd5ANALYSIS...

Malware Analysis – smokeloader – 8ffa156806f6de5616d493e5b2b90ee7

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8ffa156806f6de5616d493e5b2b90ee7SHA1: f82515e8f671762f7ec80be38fff330f6d4ce6abANALYSIS DATE: 2023-02-08T09:56:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 5291189417e7702824378a4ee78c1840

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5291189417e7702824378a4ee78c1840SHA1: bb0d48304546077175252b08f59f008695e9427eANALYSIS DATE: 2023-02-08T09:56:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – blackmatter – 930b9c1792a539acdb051af34de91060

February 8, 2023

Score: 10 MALWARE FAMILY: blackmatterTAGS:family:blackmatter, ransomwareMD5: 930b9c1792a539acdb051af34de91060SHA1: 2cda394db71fc67905e31d9e8f4b88ef85a248dcANALYSIS DATE: 2023-02-08T09:11:44ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis

Malware Analysis – djvu – f7e484ed4d3b204dffa616abf58a050d

Malware Analysis – djvu – 3f6f77fbfd970422f391168b7527aacf

Malware Analysis – djvu – efb42a578049e2b8f37be9fb852c6eba

Malware Analysis – ransomware – f31d6529ff4ad98053f9a8a9832f95e3

Malware Analysis – evasion – 2280a8daff5f3edaaa91eaf2af3db70b

Malware Analysis – djvu – 4cf9a9a6dd35e23a84488490eb10c9ff

Malware Analysis – evasion – fc09aee634702b283fde4f76ecaf8427

Malware Analysis – – 15e04e8d884d3a294f7c9094700e9149

Malware Analysis – – a0b64b439b2cda9875093e89c4ef7d91

Malware Analysis – persistence – 19ae6f2504c0cddeb4becaa8b9fc8024

Malware Analysis – – 441ecc410cb1753b655789df2c7f8deb

Malware Analysis – ransomware – c0c1f9d4bc9eb46e9518dd146ea7df33

Malware Analysis – ransomware – e8e9ee58ef7e23b87b66bf49a3102cff

Malware Analysis – evasion – 21f7c6ea1d1c19654b2f4fc32f454d54

Malware Analysis – djvu – 98fc4340567cdff88b194c45b71d2c7a

Malware Analysis – conti – d69589f5bd6c3c799be2d2fd2b718af1

Malware Analysis – – d6ad8da80809d7558c1a934e6ef28cbc

Malware Analysis – evasion – 1ec0d6f7d058212c7e8288cac9cc97fc

Malware Analysis – discovery – 662d26b4e627e44a0da5e5e99fa41942

Malware Analysis – lockbit – fe5101b50e92a923d74cc6f0f4225539

Malware Analysis – djvu – 874a8573bbe9da63a8026990fd4f7327

Malware Analysis – smokeloader – 8ffa156806f6de5616d493e5b2b90ee7

Malware Analysis – smokeloader – 5291189417e7702824378a4ee78c1840

Malware Analysis – blackmatter – 930b9c1792a539acdb051af34de91060

[AKIRA] – Ransomware Victim: BAF Management Consulting

[QILIN] – Ransomware Victim: ProActive Solutions USA

[QILIN] – Ransomware Victim: The Paul Wilkinson Law Firm

[LYNX] – Ransomware Victim: Greta Group

[LYNX] – Ransomware Victim: Victoria Garden

You may have missed