Malware Analysis

Malware Analysis – djvu – a237e7d2a7113dc1ed04f60cccbf77e6

February 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a237e7d2a7113dc1ed04f60cccbf77e6SHA1: 4e629739c773855aa15d702ea789809598844827ANALYSIS DATE: 2023-02-01T10:08:17ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – smokeloader – 5b82951e130e62cdd1ffe83c173c5577

February 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5b82951e130e62cdd1ffe83c173c5577SHA1: ea6d9f216a48d4d11ebb9026d225ba3a48cda3eeANALYSIS DATE: 2023-02-01T09:33:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 87fdb817f23819d66aa76611694525cf

February 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 87fdb817f23819d66aa76611694525cfSHA1: 4b4d231ba899be8a4973a96fe86cd34bd79dd05fANALYSIS DATE: 2023-02-01T10:35:26ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – djvu – d9f343ef3d19bcb2d9cf34a026475f6f

February 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: d9f343ef3d19bcb2d9cf34a026475f6fSHA1: d40edeccf97e8c623be22e282418c507a2d202c5ANALYSIS DATE: 2023-02-01T11:39:00ZTTPS:...

Malware Analysis – djvu – 35b59455f922242f7eb712b8a59d09e3

February 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 35b59455f922242f7eb712b8a59d09e3SHA1: 56e0003a00e6f0d2f61a9624e5b21f517bae6c4dANALYSIS DATE: 2023-02-01T10:40:04ZTTPS:...

Malware Analysis – discovery – 6ba5c46261ff52e7438f21ccef5f8c7e

February 1, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 6ba5c46261ff52e7438f21ccef5f8c7eSHA1: acdf309fbfebecb7a93b78068fc1498fae4d9e62ANALYSIS DATE: 2023-02-01T11:38:44ZTTPS: T1222, T1158 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – a809cc37ab51220d8f957f9f67d57e09

February 1, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a809cc37ab51220d8f957f9f67d57e09SHA1: bea4d2fb6764d041f89f78b5eadc2a5cd2dcfd59ANALYSIS DATE: 2023-02-01T02:45:25ZTTPS: T1012, T1120, T1082, T1112, T1491 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – de49129aa659dec2af0736cb8bf08eba

February 1, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: de49129aa659dec2af0736cb8bf08ebaSHA1: 24aa45280c7821e0c9e404f6ce846f1ce00b9823ANALYSIS DATE: 2023-02-01T05:12:57ZTTPS: T1082, T1491, T1112, T1130 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 4936a6d56013bbedd4c7769e47481772

February 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4936a6d56013bbedd4c7769e47481772SHA1: 7eb18b3bfd278e4825a23c0bb3fe739586e9d0f6ANALYSIS DATE: 2023-02-01T04:44:26ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – maze – ca927fc487ca5f9196493b8f22ff611c

February 1, 2023

Score: 10 MALWARE FAMILY: mazeTAGS:family:maze, ransomware, spyware, stealer, trojanMD5: ca927fc487ca5f9196493b8f22ff611cSHA1: afbe838c881e5b223351ff8fa05ddeb3678581baANALYSIS DATE: 2023-02-01T05:13:48ZTTPS: T1005, T1081, T1107, T1490, T1491, T1112, T1082...

Malware Analysis – djvu – bdc7ff51ade65fde49d77d149c3ab603

February 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: bdc7ff51ade65fde49d77d149c3ab603SHA1: bce076a5c43cd896ecb92f8f26e40cf7d89731f2ANALYSIS DATE: 2023-02-01T03:46:45ZTTPS:...

Malware Analysis – banker – 1fa35993c075d9884558b6c7990cdc7e

February 1, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: 1fa35993c075d9884558b6c7990cdc7eSHA1: 327cd6e3c8639b7681b49f4ce939fa8165029c6eANALYSIS DATE: 2023-02-01T05:23:57ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 071c11210a2edc6b3d92fb55617dca53

February 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 071c11210a2edc6b3d92fb55617dca53SHA1: 887064a172b18b0409ec880c7ecce2a10ba8d919ANALYSIS DATE: 2023-02-01T05:30:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – sodinokibi – 4b4c98ac8f04680f7c529956cfe8519b

February 1, 2023

Score: 10 MALWARE FAMILY: sodinokibiTAGS:family:sodinokibi, botnet:$2a$10$qq5kf6jmnztrqdzq4ez/rez9tdkves4amex9dq.5v6uwjq4wsyzky, campaign:3537, ransomwareMD5: 4b4c98ac8f04680f7c529956cfe8519bSHA1: e6dccf4b1fc5ab116b6bc1321346b35dbf42f387ANALYSIS DATE: 2023-02-01T05:34:04ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 5ac925dd0ed8f683443c4873fd48a37b

February 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 5ac925dd0ed8f683443c4873fd48a37bSHA1: 97ddc705341f4825fe41c738cab0373851c52132ANALYSIS DATE: 2023-02-01T05:46:20ZTTPS:...

Malware Analysis – discovery – f494e416737bbd1ea8af65d9bdfd6934

January 31, 2023

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, upxMD5: f494e416737bbd1ea8af65d9bdfd6934SHA1: 3de0d51ea664794278734c7b30d938ceb1495c47ANALYSIS DATE: 2023-01-31T10:32:51ZTTPS: T1082, T1012, T1060, T1112, T1130, T1102, T1018, T1497...

Malware Analysis – djvu – eb49b2fd2f173fa20b1ca9f7fd28f6cd

January 31, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: eb49b2fd2f173fa20b1ca9f7fd28f6cdSHA1: 57afd277746bb9b96970c379eb1e32719a8180f4ANALYSIS DATE: 2023-01-31T09:57:37ZTTPS: T1012, T1222, T1082, T1053,...

Malware Analysis – smokeloader – ef4734eb6342c1166b64c1597f8c1fed

January 31, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ef4734eb6342c1166b64c1597f8c1fedSHA1: 598ad1a4ff2c5e4ed49e14ec89cfd871f9bb83eeANALYSIS DATE: 2023-01-31T09:10:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 34d6da080af6ae29247f06bcae9292c5

January 31, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 34d6da080af6ae29247f06bcae9292c5SHA1: 6b1397afa50fd65b5dc38aac8e6c33ff11f9a1ddANALYSIS DATE: 2023-01-31T10:46:05ZTTPS: T1012, T1082, T1112, T1120, T1102,...

Malware Analysis – djvu – 8a60eb120c54fec26aa191b030c26d28

January 31, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 8a60eb120c54fec26aa191b030c26d28SHA1: 6fc0adb8bd283e04d43db47408c3a9f2c26f93c0ANALYSIS DATE: 2023-01-31T11:14:25ZTTPS: T1005, T1081, T1222, T1053,...

Malware Analysis – djvu – 58860a1c3b2041fef660374813f99273

January 31, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, ransomware, stealer, trojan, vmprotectMD5: 58860a1c3b2041fef660374813f99273SHA1: e8d503260b7ca66dfd0ca0e3fffb327c0a6cc7c1ANALYSIS DATE: 2023-01-31T11:17:20ZTTPS: T1222, T1053,...

Malware Analysis – smokeloader – c8558073caf7732e00775c381de062df

January 31, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c8558073caf7732e00775c381de062dfSHA1: c5c51097f6957cdc2feef36d40929bf5ba54cbd3ANALYSIS DATE: 2023-01-31T10:58:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 6263cf4ed224f1a7756f3d7c4c83cfda

January 31, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 6263cf4ed224f1a7756f3d7c4c83cfdaSHA1: 8952d8e4aa5ffd114c09afb07d082e05492b087fANALYSIS DATE: 2023-01-31T10:51:11ZTTPS: T1053, T1060, T1112, T1012,...

Malware Analysis – banker – 79c49abc1b3f7fd73ab505f4d7632963

January 31, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 79c49abc1b3f7fd73ab505f4d7632963SHA1: cf8c728f48c805bd9def4128f9d1b3aa22c78b90ANALYSIS DATE: 2023-01-31T03:30:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis

Malware Analysis – djvu – a237e7d2a7113dc1ed04f60cccbf77e6

Malware Analysis – smokeloader – 5b82951e130e62cdd1ffe83c173c5577

Malware Analysis – djvu – 87fdb817f23819d66aa76611694525cf

Malware Analysis – djvu – d9f343ef3d19bcb2d9cf34a026475f6f

Malware Analysis – djvu – 35b59455f922242f7eb712b8a59d09e3

Malware Analysis – discovery – 6ba5c46261ff52e7438f21ccef5f8c7e

Malware Analysis – evasion – a809cc37ab51220d8f957f9f67d57e09

Malware Analysis – ransomware – de49129aa659dec2af0736cb8bf08eba

Malware Analysis – djvu – 4936a6d56013bbedd4c7769e47481772

Malware Analysis – maze – ca927fc487ca5f9196493b8f22ff611c

Malware Analysis – djvu – bdc7ff51ade65fde49d77d149c3ab603

Malware Analysis – banker – 1fa35993c075d9884558b6c7990cdc7e

Malware Analysis – smokeloader – 071c11210a2edc6b3d92fb55617dca53

Malware Analysis – sodinokibi – 4b4c98ac8f04680f7c529956cfe8519b

Malware Analysis – djvu – 5ac925dd0ed8f683443c4873fd48a37b

Malware Analysis – discovery – f494e416737bbd1ea8af65d9bdfd6934

Malware Analysis – djvu – eb49b2fd2f173fa20b1ca9f7fd28f6cd

Malware Analysis – smokeloader – ef4734eb6342c1166b64c1597f8c1fed

Malware Analysis – discovery – 34d6da080af6ae29247f06bcae9292c5

Malware Analysis – djvu – 8a60eb120c54fec26aa191b030c26d28

Malware Analysis – djvu – 58860a1c3b2041fef660374813f99273

Malware Analysis – smokeloader – c8558073caf7732e00775c381de062df

Malware Analysis – djvu – 6263cf4ed224f1a7756f3d7c4c83cfda

Malware Analysis – banker – 79c49abc1b3f7fd73ab505f4d7632963

[INCRANSOM] – Ransomware Victim: KohaFoods Hawaii

[INCRANSOM] – Ransomware Victim: bridge-housing-corp

[AKIRA] – Ransomware Victim: Treetop Companies

[CRYPTO24] – Ransomware Victim: AsahiKASEI MICRODEVICES

CVE Alert: CVE-2025-59511 – Microsoft – Windows 10 Version 1809

You may have missed