Malware Analysis

Malware Analysis – amadey – 8750e1544d10060bc87b5c5e3109a738

February 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:fabookie, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Malware Analysis – evasion – 9a9b6378002daad4ccfce9cba9a34933

February 6, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 9a9b6378002daad4ccfce9cba9a34933SHA1: 77575fb1e8445eb8e7dff01e99906cf256bd7e0bANALYSIS DATE: 2023-02-05T20:53:15ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – a0181ff906bc0cb553899eb446ca1b08

February 6, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a0181ff906bc0cb553899eb446ca1b08SHA1: c8990ef58f21d12a46f4af2f4084ea3ab530d742ANALYSIS DATE: 2023-02-05T20:56:06ZTTPS: T1012, T1082, T1491, T1112, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 1d7d853773131ef4a31c875ae9914cda

February 6, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1d7d853773131ef4a31c875ae9914cdaSHA1: 8f6e355d8cc8d048c823c6d0a4f219d08d4c5124ANALYSIS DATE: 2023-02-05T20:23:55ZTTPS: T1012, T1082, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 7b4b45f6f9ee88b3bac8b538932520e1

February 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 7b4b45f6f9ee88b3bac8b538932520e1SHA1: 761bcda57915a9c32e73209a7c52704b5de3f6faANALYSIS DATE: 2023-02-05T21:27:38ZTTPS: T1012, T1053, T1005, T1081,...

Malware Analysis – discovery – 939a14c3eaab6a87c836843a36a0ad44

February 6, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 939a14c3eaab6a87c836843a36a0ad44SHA1: fa37605be662673d15104e693dd3bc8a450313afANALYSIS DATE: 2023-02-05T21:31:29ZTTPS: T1130, T1112, T1012, T1082, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – amadey – ddd68e4ae82bcc1ecab5398ea2d3748e

February 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: ddd68e4ae82bcc1ecab5398ea2d3748eSHA1:...

Malware Analysis – ransomware – 526cb037d9e9508e3be1c4cb9031d7be

February 6, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 526cb037d9e9508e3be1c4cb9031d7beSHA1: 2d6c18a4871cbc6a491d2d25172d6bb2eb09e322ANALYSIS DATE: 2023-02-05T21:26:35ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – c15bd704405c47f1cf081cba3ec67d17

February 6, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c15bd704405c47f1cf081cba3ec67d17SHA1: 5c74894ad0228821cef1794cfeb6a989e7ec551aANALYSIS DATE: 2023-02-05T23:00:55ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – f375509ec7c94ea952a46ef291ebf016

February 6, 2023

Malware Analysis – djvu – 1edb26e25c326398bf841cb61b8bfa91

February 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1edb26e25c326398bf841cb61b8bfa91SHA1: 5a65720208dba0c93d493af61dd58cf4a202ded6ANALYSIS DATE: 2023-02-05T21:50:41ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – wannacry – efe76bf09daba2c594d2bc173d9b5cf0

February 6, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: efe76bf09daba2c594d2bc173d9b5cf0SHA1: ba5de52939cb809eae10fdbb7fac47095a9599a7ANALYSIS DATE: 2023-02-05T23:54:03ZTTPS: T1082, T1491, T1112, T1107, T1490,...

Malware Analysis – ransomware – 553d6e39acfbed86ed67ebc1a95cb9c6

February 5, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 553d6e39acfbed86ed67ebc1a95cb9c6SHA1: 750c7de058a4cc1c92ed28862f884c19487ae67fANALYSIS DATE: 2023-02-05T15:07:00ZTTPS: T1012, T1082, T1130, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – 94da092e8e494a9399a9a12b127d277a

February 5, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:fabookie, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, evasion, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – discovery – 1b787e4e36dd37d9ee28ddc0dc72ef94

February 5, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 1b787e4e36dd37d9ee28ddc0dc72ef94SHA1: b25d730507352b7476e70da79290a5b5befa4344ANALYSIS DATE: 2023-02-05T16:41:07ZTTPS: T1060, T1012, T1082, T1112, T1042 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 4c716921194529611dea61850bdeaab1

February 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4c716921194529611dea61850bdeaab1SHA1: d99854ef33473547d88768366efb4b97df51c9a3ANALYSIS DATE: 2023-02-05T16:18:53ZTTPS: T1012, T1053, T1005, T1081,...

Malware Analysis – discovery – 1a02eb3168bbdd32c405eb1b285a2c73

February 5, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 1a02eb3168bbdd32c405eb1b285a2c73SHA1: 7ded705a858dc692aa39d85dd24546a6efaa35ecANALYSIS DATE: 2023-02-05T15:31:53ZTTPS: T1112, T1102, T1012, T1082, T1042, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – amadey – bf8e4c9c13f7c1fc4efbb3c120e28ec2

February 5, 2023

Malware Analysis – amadey – 1537544ea816ac5717c9b25b269342fa

February 5, 2023

Malware Analysis – ransomware – 91b18376763422b66e480613442500cc

February 5, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 91b18376763422b66e480613442500ccSHA1: 2ab01c91c5627a16c83c94020d7ecc4d47acacefANALYSIS DATE: 2023-02-05T17:12:48ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 4fa1b540403f6d9b8152a2379a9c7f86

February 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4fa1b540403f6d9b8152a2379a9c7f86SHA1: f66d7c39925b615f818d4e5c314205c9e33877ebANALYSIS DATE: 2023-02-05T17:19:37ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – djvu – 04e7c5bc175af23b20b410a418eddc20

February 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 04e7c5bc175af23b20b410a418eddc20SHA1: e50af1499fd4e16d218cb1d6cc1a093b786e1eb8ANALYSIS DATE: 2023-02-05T17:41:02ZTTPS: T1005, T1081, T1053, T1082,...

Malware Analysis – amadey – aa5cdf45ddc9c7cdcd6d5aee1e1c80e2

February 4, 2023

Malware Analysis – ransomware – cccc83f84ef321c7d604c17234c40f24

February 4, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: cccc83f84ef321c7d604c17234c40f24SHA1: 7c9cd1a4d93077974869f421490303efb8823615ANALYSIS DATE: 2023-02-04T03:46:39ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis

Malware Analysis – amadey – 8750e1544d10060bc87b5c5e3109a738

Malware Analysis – evasion – 9a9b6378002daad4ccfce9cba9a34933

Malware Analysis – evasion – a0181ff906bc0cb553899eb446ca1b08

Malware Analysis – ransomware – 1d7d853773131ef4a31c875ae9914cda

Malware Analysis – djvu – 7b4b45f6f9ee88b3bac8b538932520e1

Malware Analysis – discovery – 939a14c3eaab6a87c836843a36a0ad44

Malware Analysis – amadey – ddd68e4ae82bcc1ecab5398ea2d3748e

Malware Analysis – ransomware – 526cb037d9e9508e3be1c4cb9031d7be

Malware Analysis – ransomware – c15bd704405c47f1cf081cba3ec67d17

Malware Analysis – amadey – f375509ec7c94ea952a46ef291ebf016

Malware Analysis – djvu – 1edb26e25c326398bf841cb61b8bfa91

Malware Analysis – wannacry – efe76bf09daba2c594d2bc173d9b5cf0

Malware Analysis – ransomware – 553d6e39acfbed86ed67ebc1a95cb9c6

Malware Analysis – amadey – 94da092e8e494a9399a9a12b127d277a

Malware Analysis – discovery – 1b787e4e36dd37d9ee28ddc0dc72ef94

Malware Analysis – djvu – 4c716921194529611dea61850bdeaab1

Malware Analysis – discovery – 1a02eb3168bbdd32c405eb1b285a2c73

Malware Analysis – amadey – bf8e4c9c13f7c1fc4efbb3c120e28ec2

Malware Analysis – amadey – 1537544ea816ac5717c9b25b269342fa

Malware Analysis – ransomware – 91b18376763422b66e480613442500cc

Malware Analysis – djvu – 4fa1b540403f6d9b8152a2379a9c7f86

Malware Analysis – djvu – 04e7c5bc175af23b20b410a418eddc20

Malware Analysis – amadey – aa5cdf45ddc9c7cdcd6d5aee1e1c80e2

Malware Analysis – ransomware – cccc83f84ef321c7d604c17234c40f24

Apple Products Multiple Vulnerabilities

Miljödata – 870,108 breached accounts

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

Cobalt Strike Beacon Detected – 106[.]54[.]239[.]134:80

Cobalt Strike Beacon Detected – 81[.]69[.]98[.]230:50010

You may have missed