OSINT

Malware Analysis – cerber – 10d74de972a374bb9b35944901556f5f

March 12, 2023

Score: 10 MALWARE FAMILY: cerberTAGS:family:cerber, discovery, evasion, ransomwareMD5: 10d74de972a374bb9b35944901556f5fSHA1: 593f11e2aa70a1508d5e58ea65bec0ae04b68d64ANALYSIS DATE: 2023-03-11T23:55:16ZTTPS: T1046, T1012, T1120, T1082, T1018, T1031, T1491, T1112...

Malware Analysis – azorult – 968b476f2246e218e34f5a13083ee861

March 11, 2023

Score: 10 MALWARE FAMILY: azorultTAGS:family:azorult, family:chimera, family:lokibot, family:rms, aspackv2, collection, discovery, evasion, infostealer, persistence, ransomware, rat, spyware, stealer, trojan, upxMD5:...

Malware Analysis – djvu – ee86ca0d8ee591be31b0bc612f0184f6

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: ee86ca0d8ee591be31b0bc612f0184f6SHA1: a24934b0c07ca0522b5f0242565e7433fe5f6927ANALYSIS DATE: 2023-03-11T15:04:52ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 565255248ac5173c85d3e37dd93c9da6

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 565255248ac5173c85d3e37dd93c9da6SHA1: dd8e1b95db664a4c2223f8c926967167d7801221ANALYSIS DATE: 2023-03-11T15:05:26ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – smokeloader – 865c8dfea5a5828278255ef3e5958895

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 865c8dfea5a5828278255ef3e5958895SHA1: d5f5e6de01ce864d433ae01609ebd16f2d7ed5a8ANALYSIS DATE: 2023-03-11T15:15:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 3515b1f929c1143764fc8243e94cd9a1

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3515b1f929c1143764fc8243e94cd9a1SHA1: a7724b75b5dc54d69fd568614a601dab31321cd8ANALYSIS DATE: 2023-03-11T15:37:32ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5ef6d0054454a4b73abc91f68cd7b2e3

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 5ef6d0054454a4b73abc91f68cd7b2e3SHA1: 20ca9e635d05426c9b61130161fe882f92236cf9ANALYSIS DATE: 2023-03-11T15:51:09ZTTPS: T1222, T1005, T1081, T1082,...

Malware Analysis – smokeloader – 104d5c4fcc1354becfae10ce09f0fb24

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 104d5c4fcc1354becfae10ce09f0fb24SHA1: 971ab0be3950346706add04bad69028a641355a1ANALYSIS DATE: 2023-03-11T15:44:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 5a92c380094b8168ae2a6b2216a0053c

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5a92c380094b8168ae2a6b2216a0053cSHA1: 7b2b731df7a4b6e4ede438cc742d0aa43010b2daANALYSIS DATE: 2023-03-11T15:44:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a54e2410ede6d7e2b5c09d71f82bce2a

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a54e2410ede6d7e2b5c09d71f82bce2aSHA1: 284fcca666ea40c49d6037b09c8cb5675c63e356ANALYSIS DATE: 2023-03-11T15:44:47ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – avaddon – 9f0f396edd98f347ba72634814d9958e

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 9f0f396edd98f347ba72634814d9958eSHA1: 334b98749279e793ea861ec4e868101314077592ANALYSIS DATE: 2023-03-11T15:54:45ZTTPS: T1082, T1088, T1089, T1112, T1130, T1012, T1120,...

Malware Analysis – avaddon – a071fce53e2bf9fb9a2db5ce91c511ef

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: a071fce53e2bf9fb9a2db5ce91c511efSHA1: addf8230e78fa84c8b9c1b3bac4162a82e6421b4ANALYSIS DATE: 2023-03-11T15:54:43ZTTPS: T1082, T1107, T1490, T1088, T1089, T1112, T1012,...

Malware Analysis – avaddon – 8f51096756e54fda6bedd87f3d5d8a6d

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 8f51096756e54fda6bedd87f3d5d8a6dSHA1: 77a16be6841337b467e9b27f33e0e30decda0e92ANALYSIS DATE: 2023-03-11T15:54:46ZTTPS: T1082, T1088, T1089, T1112, T1060, T1107, T1490,...

Malware Analysis – avaddon – 5ea6f26b734ba366c801dbc4bef0ad28

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: 5ea6f26b734ba366c801dbc4bef0ad28SHA1: 232ce5cb35b9c930da0cfcb07d074aecd8f30a28ANALYSIS DATE: 2023-03-11T15:54:44ZTTPS: T1107, T1490, T1082, T1012, T1120, T1088, T1089, T1112...

Malware Analysis – avaddon – 145cb17599f245058b5fd7fccb6f0d8a

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: 145cb17599f245058b5fd7fccb6f0d8aSHA1: 4ebfef558949f71b78efd9a874951cac799ecbb3ANALYSIS DATE: 2023-03-11T15:54:53ZTTPS: T1082, T1088, T1089, T1112, T1107, T1490, T1012, T1120...

Malware Analysis – avaddon – 93130b2a1f14c0518e7320a9e9802807

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 93130b2a1f14c0518e7320a9e9802807SHA1: 10ea43cae274915aa0a42b16a8485a90962139f7ANALYSIS DATE: 2023-03-11T15:54:49ZTTPS: T1088, T1089, T1112, T1107, T1490, T1082, T1012,...

Malware Analysis – avaddon – 37c880cd7d92ba4201db8985971bcf98

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 37c880cd7d92ba4201db8985971bcf98SHA1: 80704180991ff9b493da78032ea071b2d3221ec1ANALYSIS DATE: 2023-03-11T15:54:50ZTTPS: T1112, T1060, T1082, T1088, T1089, T1107, T1490,...

Malware Analysis – djvu – b036716c3f9ac55b6474de4aba85fd94

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: b036716c3f9ac55b6474de4aba85fd94SHA1: f7bd8dc2b12e6d7125d66abd41cc22705ed78971ANALYSIS DATE: 2023-03-11T16:14:04ZTTPS: T1130, T1112, T1053, T1005,...

Malware Analysis – djvu – 5a97dead64d220f172b81f4d9de2a6c3

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 5a97dead64d220f172b81f4d9de2a6c3SHA1: 0b704f55ae59306c6b49916114d8bef6f5192c66ANALYSIS DATE: 2023-03-11T16:40:36ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – chaos – f5b62c5b6c334b0384ec26decc67ee1d

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: f5b62c5b6c334b0384ec26decc67ee1dSHA1: 84ed720f8a90a0c33454016a618c071f680c0dc1ANALYSIS DATE: 2023-03-11T16:41:19ZTTPS: T1490, T1059, T1107, T1012, T1491, T1112, T1082,...

Malware Analysis – djvu – 77aaf1d9fe73f9e880fc692d1d410029

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 77aaf1d9fe73f9e880fc692d1d410029SHA1: 6dc62a2cd2079e9a32137471778ae7e46cc54d46ANALYSIS DATE: 2023-03-11T16:41:20ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – evasion – bd4787c247bf809d94d3b16d5243730c

March 11, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: bd4787c247bf809d94d3b16d5243730cSHA1: 789066dd4e4187e5d0a5ea3c2166970bcbfe2ab8ANALYSIS DATE: 2023-03-11T16:35:59ZTTPS: T1088, T1089, T1112, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – chaos – 5e9e6b90b530260d1f6dd462a9a2fa16

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 5e9e6b90b530260d1f6dd462a9a2fa16SHA1: 3caa6e6d2aed85b9ea046a077a972c2a1718ee7bANALYSIS DATE: 2023-03-11T16:45:07ZTTPS: T1490, T1059, T1107, T1082, T1012, T1005, T1081...

Malware Analysis – dharma – a0dd1dfbac4b2aaed94b2065a9c9f30c

March 11, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: a0dd1dfbac4b2aaed94b2065a9c9f30cSHA1: b797000407eb333dc80777dd088204179b62fb5cANALYSIS DATE: 2023-03-11T16:46:30ZTTPS: T1107, T1490, T1112, T1060, T1005, T1081, T1082...

OSINT

Malware Analysis – cerber – 10d74de972a374bb9b35944901556f5f

Malware Analysis – azorult – 968b476f2246e218e34f5a13083ee861

Malware Analysis – djvu – ee86ca0d8ee591be31b0bc612f0184f6

Malware Analysis – djvu – 565255248ac5173c85d3e37dd93c9da6

Malware Analysis – smokeloader – 865c8dfea5a5828278255ef3e5958895

Malware Analysis – smokeloader – 3515b1f929c1143764fc8243e94cd9a1

Malware Analysis – djvu – 5ef6d0054454a4b73abc91f68cd7b2e3

Malware Analysis – smokeloader – 104d5c4fcc1354becfae10ce09f0fb24

Malware Analysis – smokeloader – 5a92c380094b8168ae2a6b2216a0053c

Malware Analysis – smokeloader – a54e2410ede6d7e2b5c09d71f82bce2a

Malware Analysis – avaddon – 9f0f396edd98f347ba72634814d9958e

Malware Analysis – avaddon – a071fce53e2bf9fb9a2db5ce91c511ef

Malware Analysis – avaddon – 8f51096756e54fda6bedd87f3d5d8a6d

Malware Analysis – avaddon – 5ea6f26b734ba366c801dbc4bef0ad28

Malware Analysis – avaddon – 145cb17599f245058b5fd7fccb6f0d8a

Malware Analysis – avaddon – 93130b2a1f14c0518e7320a9e9802807

Malware Analysis – avaddon – 37c880cd7d92ba4201db8985971bcf98

Malware Analysis – djvu – b036716c3f9ac55b6474de4aba85fd94

Malware Analysis – djvu – 5a97dead64d220f172b81f4d9de2a6c3

Malware Analysis – chaos – f5b62c5b6c334b0384ec26decc67ee1d

Malware Analysis – djvu – 77aaf1d9fe73f9e880fc692d1d410029

Malware Analysis – evasion – bd4787c247bf809d94d3b16d5243730c

Malware Analysis – chaos – 5e9e6b90b530260d1f6dd462a9a2fa16

Malware Analysis – dharma – a0dd1dfbac4b2aaed94b2065a9c9f30c

[INCRANSOM] – Ransomware Victim: cityofgardendale[.]com

CVE Alert: CVE-2025-27452

CVE Alert: CVE-2025-27453

CVE Alert: CVE-2025-27454

CVE Alert: CVE-2025-27455

You may have missed