Malware Analysis

Malware Analysis – phobos – b3c9270aea86b5cccc82c0afeff6460a

January 27, 2023

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: b3c9270aea86b5cccc82c0afeff6460aSHA1: eb75b5f2207c576d72c17a85fef939fd657ecaaeANALYSIS DATE: 2023-01-26T23:14:08ZTTPS: T1490, T1059, T1107, T1060, T1112, T1031,...

Malware Analysis – djvu – 38fcf041ee6209342522ee5e9cc87bf5

January 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 38fcf041ee6209342522ee5e9cc87bf5SHA1: 9dd0f6e3460dab3d2183c7935f4a2034820b00d0ANALYSIS DATE: 2023-01-26T23:31:22ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – smokeloader – 55ce7bedbb562c58727b47abef769f27

January 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 55ce7bedbb562c58727b47abef769f27SHA1: d2625eca492c2b43189febfb16c1ecbda5be6fdaANALYSIS DATE: 2023-01-26T23:33:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 00c34bd8bd72d2efdd70fe6737687246

January 27, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 00c34bd8bd72d2efdd70fe6737687246SHA1: 165c93db4ef01a071281c7b334a8bd940d53d45fANALYSIS DATE: 2023-01-26T23:57:02ZTTPS: T1490, T1060, T1112, T1031, T1562, T1489 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – ff811751380e00d1e0f9a43645c6155e

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: ff811751380e00d1e0f9a43645c6155eSHA1: 997b34aa9abd66c83ef06e49032385dc53e55338ANALYSIS DATE: 2023-01-26T15:03:14ZTTPS: T1012,...

Malware Analysis – discovery – 1800fe2f1abdc23120b03b7b3630fa1d

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 1800fe2f1abdc23120b03b7b3630fa1dSHA1: 69f87b010a46c77e3aa93507e422f7781922b937ANALYSIS DATE: 2023-01-26T15:08:24ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – e9aa3add39a7cd937c7f2886602ce9b1

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: e9aa3add39a7cd937c7f2886602ce9b1SHA1: 7f161fe9e9693238ae82e8c07600716e6959b740ANALYSIS DATE: 2023-01-26T16:02:00ZTTPS: T1082, T1012, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 802c3dd045b2277aa0846689e152892d

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 802c3dd045b2277aa0846689e152892dSHA1: ea895467c292406be2472debbaec4685d29f8d6dANALYSIS DATE: 2023-01-26T16:11:32ZTTPS:...

Malware Analysis – djvu – ce2daf9e687edbeb4d78d41abbab4736

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ce2daf9e687edbeb4d78d41abbab4736SHA1: ab9a7fd9b64a7b28fe3dfc3a04eb3b057dfdef33ANALYSIS DATE: 2023-01-26T16:40:34ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – gafgyt – 90276982cc921f646f74f8310ef8cd6a

January 26, 2023

Score: 10 MALWARE FAMILY: gafgytTAGS:family:gafgyt, family:plugx, family:redline, botnet, discovery, exploit, infostealer, persistence, trojanMD5: 90276982cc921f646f74f8310ef8cd6aSHA1: 37d5ff4e70485bbcc6e4ef6fa08d3b7839012d0fANALYSIS DATE: 2023-01-26T16:47:40ZTTPS: T1012, T1082, T1130,...

Malware Analysis – smokeloader – 9ea4f8811d333a11401a102e8bc84c78

January 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9ea4f8811d333a11401a102e8bc84c78SHA1: b246b1aa87de2a8fa7770371ff53ee3e0e4f449dANALYSIS DATE: 2023-01-26T16:36:10ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9a0ea0a71406b61a6ec0bf4408f5898e

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9a0ea0a71406b61a6ec0bf4408f5898eSHA1: 5c893181fb54cbd9db3b0b6af8cf6fe07df80c88ANALYSIS DATE: 2023-01-26T17:32:34ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – discovery – 6b43663e875f7f6cbb40fe72cae01b9b

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 6b43663e875f7f6cbb40fe72cae01b9bSHA1: 1c32ca96df9b3ebe1a1f163baf1999ce564ae438ANALYSIS DATE: 2023-01-26T17:51:39ZTTPS: T1082, T1060, T1112, T1012, T1130 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – d37b8714a55b734644d3f88ecb6da612

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: d37b8714a55b734644d3f88ecb6da612SHA1: 67fd5834a7f0819c2ba06b4ed21c9a0876296c58ANALYSIS DATE: 2023-01-26T17:40:22ZTTPS:...

Malware Analysis – joker – dea8911e2f66aad91aaa2c1afb40c697

January 26, 2023

Score: 10 MALWARE FAMILY: jokerTAGS:family:joker, evasion, infostealer, ransomware, trojanMD5: dea8911e2f66aad91aaa2c1afb40c697SHA1: 6aed964342314fc7fd5c0c3cb6f2ef1814472916ANALYSIS DATE: 2023-01-26T17:36:03ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 5138399605906d20f0d997f76a455305

January 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5138399605906d20f0d997f76a455305SHA1: 1c3d6a4e2e3c06654cd6ce9a63df125285cc39ecANALYSIS DATE: 2023-01-26T09:23:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1e26a5b4fef1212594a1a80192b5af49

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1e26a5b4fef1212594a1a80192b5af49SHA1: 805eab0ee48f53b202a4e9e518d957630b06483dANALYSIS DATE: 2023-01-26T09:10:44ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – discovery – 69a60a65668851b6ddb406e3094b2e86

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 69a60a65668851b6ddb406e3094b2e86SHA1: 484a781471ed7227ed6636122fdbac56e9895b3fANALYSIS DATE: 2023-01-26T10:29:17ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – afd4bd2d1bf9a2648a0ddfd0bd572e57

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: afd4bd2d1bf9a2648a0ddfd0bd572e57SHA1: 25c7285f2d5da15e1d60945ccbac73b6ae04fc33ANALYSIS DATE: 2023-01-26T09:30:51ZTTPS: T1012, T1222, T1082, T1005,...

Malware Analysis – djvu – 09a0cb3a24b41bc88ad4e89bbc66b492

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 09a0cb3a24b41bc88ad4e89bbc66b492SHA1: 4587378995be7068c587591933f38990fe5bee23ANALYSIS DATE: 2023-01-26T10:08:47ZTTPS:...

Malware Analysis – discovery – 1b8f29e2103cf73b4844c685c6f6ce5e

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomware, spyware, stealerMD5: 1b8f29e2103cf73b4844c685c6f6ce5eSHA1: bc2607fce6742c21c4d8a679968e3769e40261f6ANALYSIS DATE: 2023-01-26T09:50:00ZTTPS: T1060, T1012, T1112, T1005, T1081, T1082, T1042...

Malware Analysis – djvu – 8edc269873eb17d0c726919b0b2855d5

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, trojan, vmprotectMD5: 8edc269873eb17d0c726919b0b2855d5SHA1: 1ccb3faed9993c542e92f66f10fe2ec992408971ANALYSIS DATE: 2023-01-26T10:57:08ZTTPS: T1012, T1120, T1082, T1222,...

Malware Analysis – djvu – 4623857875232b3cd157433eb1fd0e46

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4623857875232b3cd157433eb1fd0e46SHA1: f5b05f67ddf98eb52427f49f346736eeb1f47ffcANALYSIS DATE: 2023-01-26T10:54:21ZTTPS: T1005, T1081, T1082, T1012,...

Malware Analysis – smokeloader – 7961d2f393fbc2f1fa49db7410feaa21

January 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7961d2f393fbc2f1fa49db7410feaa21SHA1: d7b1b94ee117bf2a4be1f3b6044fde46d175d27eANALYSIS DATE: 2023-01-26T11:25:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – phobos – b3c9270aea86b5cccc82c0afeff6460a

Malware Analysis – djvu – 38fcf041ee6209342522ee5e9cc87bf5

Malware Analysis – smokeloader – 55ce7bedbb562c58727b47abef769f27

Malware Analysis – evasion – 00c34bd8bd72d2efdd70fe6737687246

Malware Analysis – djvu – ff811751380e00d1e0f9a43645c6155e

Malware Analysis – discovery – 1800fe2f1abdc23120b03b7b3630fa1d

Malware Analysis – discovery – e9aa3add39a7cd937c7f2886602ce9b1

Malware Analysis – djvu – 802c3dd045b2277aa0846689e152892d

Malware Analysis – djvu – ce2daf9e687edbeb4d78d41abbab4736

Malware Analysis – gafgyt – 90276982cc921f646f74f8310ef8cd6a

Malware Analysis – smokeloader – 9ea4f8811d333a11401a102e8bc84c78

Malware Analysis – djvu – 9a0ea0a71406b61a6ec0bf4408f5898e

Malware Analysis – discovery – 6b43663e875f7f6cbb40fe72cae01b9b

Malware Analysis – djvu – d37b8714a55b734644d3f88ecb6da612

Malware Analysis – joker – dea8911e2f66aad91aaa2c1afb40c697

Malware Analysis – smokeloader – 5138399605906d20f0d997f76a455305

Malware Analysis – djvu – 1e26a5b4fef1212594a1a80192b5af49

Malware Analysis – discovery – 69a60a65668851b6ddb406e3094b2e86

Malware Analysis – djvu – afd4bd2d1bf9a2648a0ddfd0bd572e57

Malware Analysis – djvu – 09a0cb3a24b41bc88ad4e89bbc66b492

Malware Analysis – discovery – 1b8f29e2103cf73b4844c685c6f6ce5e

Malware Analysis – djvu – 8edc269873eb17d0c726919b0b2855d5

Malware Analysis – djvu – 4623857875232b3cd157433eb1fd0e46

Malware Analysis – smokeloader – 7961d2f393fbc2f1fa49db7410feaa21

[CRYPTO24] – Ransomware Victim: AsahiKASEI MICRODEVICES

CVE Alert: CVE-2025-59511 – Microsoft – Windows 10 Version 1809

CVE Alert: CVE-2025-59512 – Microsoft – Windows 10 Version 1809

CVE Alert: CVE-2025-59507 – Microsoft – Windows 10 Version 1809

CVE Alert: CVE-2025-59508 – Microsoft – Windows 10 Version 1809

You may have missed