Malware Analysis

Malware Analysis – smokeloader – 9c2b5b98a1d4f06797789a0bd58cc722

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9c2b5b98a1d4f06797789a0bd58cc722SHA1: d7ae8cb4ddadd8be514c3ea035676a211f3e94a1ANALYSIS DATE: 2023-02-08T09:56:27ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – db877af32192fdc5491af19fd5e30983

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: db877af32192fdc5491af19fd5e30983SHA1: 058787ff446ca75ccdaeb592dd68678d4f01553fANALYSIS DATE: 2023-02-08T10:04:17ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 799c833e24fb71e0caeb546bc132a5e5

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 799c833e24fb71e0caeb546bc132a5e5SHA1: 474164be24010f1f969bd1b15090be9a1081ef97ANALYSIS DATE: 2023-02-08T09:56:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 6cbd15ef3fa6a26bc90555d1073897ae

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6cbd15ef3fa6a26bc90555d1073897aeSHA1: 3bb9bd4ac387e338001e870fa31818f04fd34c3bANALYSIS DATE: 2023-02-08T09:56:21ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 1e9d4af109f42baa420598b1cb38d307

February 8, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 1e9d4af109f42baa420598b1cb38d307SHA1: 71db2886b1dde3e92bbab3af7be627f253532736ANALYSIS DATE: 2023-02-08T10:46:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – e9d243eb7e4f2576ff96c3143f2fb30d

February 8, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: e9d243eb7e4f2576ff96c3143f2fb30dSHA1: 22bf98b87e9f9adbd2c8e7f7737527a59eb81676ANALYSIS DATE: 2023-02-08T10:04:52ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 52b05e7505ad1a8b287ad019764574ac

February 8, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 52b05e7505ad1a8b287ad019764574acSHA1: bdbf153dde1200c80ae0c4cdbb9d43e155337d67ANALYSIS DATE: 2023-02-08T10:33:00ZTTPS: T1012, T1082, T1120, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 0cecc0fdd634ffe7605faf597e6e8283

February 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:gozi, family:laplas, family:smokeloader, botnet:1001, backdoor, banker, clipper, discovery, isfb, persistence, ransomware, stealer, trojanMD5: 0cecc0fdd634ffe7605faf597e6e8283SHA1: 3bbdb6599d477bf73b5c0a679c418a80a0dbf141ANALYSIS...

Malware Analysis – chaos – df96e57feb8b5e1265a93d409a77cf45

February 8, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: df96e57feb8b5e1265a93d409a77cf45SHA1: 5aa167a4755cf0b86385f8e62b5b403e72ccf203ANALYSIS DATE: 2023-02-08T10:52:04ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 4bfc92bc80045b031e7c14070143e1d3

February 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 4bfc92bc80045b031e7c14070143e1d3SHA1: 0d80e47173d8952f35edc76f0fc8c74b4829ee49ANALYSIS DATE: 2023-02-08T11:03:23ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 74392d410bd20b67ebd23bdc9b6ec372

February 8, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 74392d410bd20b67ebd23bdc9b6ec372SHA1: a05c73b391df124349eff51c2b32e54d6822edd8ANALYSIS DATE: 2023-02-08T11:36:17ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – lockbit – 5761ee98b1c2fea31b5408516a8929ea

February 8, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, evasion, persistence, ransomwareMD5: 5761ee98b1c2fea31b5408516a8929eaSHA1: 4d043df23e55088bfc04c14dfb9ddb329a703cc1ANALYSIS DATE: 2023-02-08T10:56:37ZTTPS: T1490, T1059, T1107, T1491, T1112, T1018, T1060, T1082...

Malware Analysis – smokeloader – 7f2d28e3c305aa30e921a8eb72a1300f

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7f2d28e3c305aa30e921a8eb72a1300fSHA1: 289d3bebdf2950ae5a32da78a6220df29c3ecd34ANALYSIS DATE: 2023-02-08T03:36:01ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7b2adf17b3cfe12e19ec2db76a1529cc

February 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:gozi, family:laplas, family:smokeloader, botnet:1001, backdoor, banker, clipper, discovery, isfb, persistence, ransomware, stealer, trojanMD5: 7b2adf17b3cfe12e19ec2db76a1529ccSHA1: ffcb202abd02838b2c5f8469cdbfba4f3156f47cANALYSIS...

Malware Analysis – djvu – bcde1dc8e93f8b260586afff22acce04

February 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:gozi, family:laplas, family:smokeloader, botnet:1001, backdoor, banker, clipper, discovery, isfb, persistence, ransomware, stealer, trojanMD5: bcde1dc8e93f8b260586afff22acce04SHA1: 2faba3fd359f9bc0e47c1b06f01cd16029b60064ANALYSIS...

Malware Analysis – – 0dc5f577a0a687451405f4aeb966de54

February 8, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 0dc5f577a0a687451405f4aeb966de54SHA1: 954debbcf61dacd22a864c4fb0d67bfd209655ceANALYSIS DATE: 2023-02-07T20:56:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – b3e141a1ae1098e93e181b3ac1f1e475

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b3e141a1ae1098e93e181b3ac1f1e475SHA1: 43e9f11ad43dd0a206595e512081557f6a2be9fcANALYSIS DATE: 2023-02-07T21:35:46ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 2ca29d764e8f345e07bca3ff002144ef

February 8, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 2ca29d764e8f345e07bca3ff002144efSHA1: 47dd32211f7c9351e9f2c7ee5827a93faafcc87cANALYSIS DATE: 2023-02-07T21:03:39ZTTPS: T1112, T1012, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 2c86df67b639224a469cf7113f2e6000

February 8, 2023

Score: 10 MALWARE FAMILY: TAGS:MD5: 2c86df67b639224a469cf7113f2e6000SHA1: 56a8dd5ac769bcfb5e0b3de112bc45065aea0a14ANALYSIS DATE: 2023-02-07T21:26:38ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 0dadf70a49071755e851a5fbb065d0a9

February 8, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomware, spyware, stealerMD5: 0dadf70a49071755e851a5fbb065d0a9SHA1: 9e4b93a73898579826b43aacd70c192777e85840ANALYSIS DATE: 2023-02-07T22:03:48ZTTPS: T1082, T1012, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – – 54164f1bc24c8f7461ca009292808e58

February 8, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 54164f1bc24c8f7461ca009292808e58SHA1: f9433d8a074ca074d54b6cc4475799a3332f0e1dANALYSIS DATE: 2023-02-07T22:36:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 4e86a9673a6474a976a2983aac9d2cdf

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4e86a9673a6474a976a2983aac9d2cdfSHA1: 8fb25be31fbeff95c7d3796f045927c095d95089ANALYSIS DATE: 2023-02-07T22:33:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ab799e62d3827019ce3fe43f09273801

February 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:gozi, family:laplas, family:smokeloader, botnet:1001, backdoor, banker, clipper, discovery, isfb, persistence, ransomware, stealer, trojanMD5: ab799e62d3827019ce3fe43f09273801SHA1: 494f24b36bcf152ea3ddca396a55d326801911edANALYSIS...

Malware Analysis – djvu – 2e992d7f74ed9ca786654c960e96dc2c

February 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 2e992d7f74ed9ca786654c960e96dc2cSHA1: 1e3344a6d8086866171ebae328f6ad45c90976dcANALYSIS DATE: 2023-02-07T22:21:25ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis

Malware Analysis – smokeloader – 9c2b5b98a1d4f06797789a0bd58cc722

Malware Analysis – smokeloader – db877af32192fdc5491af19fd5e30983

Malware Analysis – smokeloader – 799c833e24fb71e0caeb546bc132a5e5

Malware Analysis – smokeloader – 6cbd15ef3fa6a26bc90555d1073897ae

Malware Analysis – – 1e9d4af109f42baa420598b1cb38d307

Malware Analysis – discovery – e9d243eb7e4f2576ff96c3143f2fb30d

Malware Analysis – persistence – 52b05e7505ad1a8b287ad019764574ac

Malware Analysis – djvu – 0cecc0fdd634ffe7605faf597e6e8283

Malware Analysis – chaos – df96e57feb8b5e1265a93d409a77cf45

Malware Analysis – ransomware – 4bfc92bc80045b031e7c14070143e1d3

Malware Analysis – ransomware – 74392d410bd20b67ebd23bdc9b6ec372

Malware Analysis – lockbit – 5761ee98b1c2fea31b5408516a8929ea

Malware Analysis – smokeloader – 7f2d28e3c305aa30e921a8eb72a1300f

Malware Analysis – djvu – 7b2adf17b3cfe12e19ec2db76a1529cc

Malware Analysis – djvu – bcde1dc8e93f8b260586afff22acce04

Malware Analysis – – 0dc5f577a0a687451405f4aeb966de54

Malware Analysis – smokeloader – b3e141a1ae1098e93e181b3ac1f1e475

Malware Analysis – discovery – 2ca29d764e8f345e07bca3ff002144ef

Malware Analysis – – 2c86df67b639224a469cf7113f2e6000

Malware Analysis – discovery – 0dadf70a49071755e851a5fbb065d0a9

Malware Analysis – – 54164f1bc24c8f7461ca009292808e58

Malware Analysis – smokeloader – 4e86a9673a6474a976a2983aac9d2cdf

Malware Analysis – djvu – ab799e62d3827019ce3fe43f09273801

Malware Analysis – djvu – 2e992d7f74ed9ca786654c960e96dc2c

Cobalt Strike Beacon Detected – 167[.]99[.]76[.]115:80

Cobalt Strike Beacon Detected – 185[.]208[.]159[.]224:80

Cobalt Strike Beacon Detected – 115[.]175[.]39[.]35:443

Cobalt Strike Beacon Detected – 121[.]36[.]228[.]26:8080

Cobalt Strike Beacon Detected – 166[.]108[.]200[.]194:443

You may have missed