OSINT

Malware Analysis – djvu – ddf6d8dd27744ee84b53ddc102613c99

March 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: ddf6d8dd27744ee84b53ddc102613c99SHA1: 2c847787379b8d6ebc93d3be41e5ae52f785167bANALYSIS DATE: 2023-03-11T21:32:25ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – banker – 177f323985be212c7eb379585119ecc2

March 12, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 177f323985be212c7eb379585119ecc2SHA1: c9224711a8d504a13e40f506eac01fc810845e8eANALYSIS DATE: 2023-03-11T21:23:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 445bb3a7b52a9bd70494d39aed213729

March 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 445bb3a7b52a9bd70494d39aed213729SHA1: 9875a852eef9900ba1d83dc5713468b340c12049ANALYSIS DATE: 2023-03-11T22:45:37ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – amadey – a118a1e07e15162e77cce97c0f921e6a

March 12, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, loader, persistence, ransomware, stealer,...

Malware Analysis – djvu – 6ce6587f733dac1590182b577d1414af

March 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 6ce6587f733dac1590182b577d1414afSHA1: 404db30d6206526ee0962cfe01f85f1e2cd841e4ANALYSIS DATE: 2023-03-11T22:43:57ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – evasion – 408a23e5fe991be0faca775f141b0267

March 12, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 408a23e5fe991be0faca775f141b0267SHA1: 53b74fce9918d4d0d70d945830c52973d1e0c898ANALYSIS DATE: 2023-03-11T22:35:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – c9fb256d422f8bbea2b3f1ed7f4a87c1

March 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: c9fb256d422f8bbea2b3f1ed7f4a87c1SHA1: 5c8b864d64fa017390fb12a054c7606b2b781e4cANALYSIS DATE: 2023-03-11T23:25:44ZTTPS: T1053, T1012, T1082, T1005,...

Malware Analysis – djvu – 918b9b4d245035565fd159b7202ed708

March 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 918b9b4d245035565fd159b7202ed708SHA1: fecbb56a0a4debd0092039ff427ea7f18a93cf93ANALYSIS DATE: 2023-03-11T23:25:16ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – amadey – 224597975b6add35631168fb06f9b20e

March 12, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, ransomware, stealer, trojanMD5: 224597975b6add35631168fb06f9b20eSHA1: b52b85a40b55aeb58a4543ce94caa734333c950cANALYSIS...

Malware Analysis – cerber – 10d74de972a374bb9b35944901556f5f

March 12, 2023

Score: 10 MALWARE FAMILY: cerberTAGS:family:cerber, discovery, evasion, ransomwareMD5: 10d74de972a374bb9b35944901556f5fSHA1: 593f11e2aa70a1508d5e58ea65bec0ae04b68d64ANALYSIS DATE: 2023-03-11T23:55:16ZTTPS: T1046, T1012, T1120, T1082, T1018, T1031, T1491, T1112...

Malware Analysis – azorult – 968b476f2246e218e34f5a13083ee861

March 11, 2023

Score: 10 MALWARE FAMILY: azorultTAGS:family:azorult, family:chimera, family:lokibot, family:rms, aspackv2, collection, discovery, evasion, infostealer, persistence, ransomware, rat, spyware, stealer, trojan, upxMD5:...

Malware Analysis – djvu – ee86ca0d8ee591be31b0bc612f0184f6

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: ee86ca0d8ee591be31b0bc612f0184f6SHA1: a24934b0c07ca0522b5f0242565e7433fe5f6927ANALYSIS DATE: 2023-03-11T15:04:52ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 565255248ac5173c85d3e37dd93c9da6

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 565255248ac5173c85d3e37dd93c9da6SHA1: dd8e1b95db664a4c2223f8c926967167d7801221ANALYSIS DATE: 2023-03-11T15:05:26ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – smokeloader – 865c8dfea5a5828278255ef3e5958895

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 865c8dfea5a5828278255ef3e5958895SHA1: d5f5e6de01ce864d433ae01609ebd16f2d7ed5a8ANALYSIS DATE: 2023-03-11T15:15:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 3515b1f929c1143764fc8243e94cd9a1

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3515b1f929c1143764fc8243e94cd9a1SHA1: a7724b75b5dc54d69fd568614a601dab31321cd8ANALYSIS DATE: 2023-03-11T15:37:32ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5ef6d0054454a4b73abc91f68cd7b2e3

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 5ef6d0054454a4b73abc91f68cd7b2e3SHA1: 20ca9e635d05426c9b61130161fe882f92236cf9ANALYSIS DATE: 2023-03-11T15:51:09ZTTPS: T1222, T1005, T1081, T1082,...

Malware Analysis – smokeloader – 104d5c4fcc1354becfae10ce09f0fb24

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 104d5c4fcc1354becfae10ce09f0fb24SHA1: 971ab0be3950346706add04bad69028a641355a1ANALYSIS DATE: 2023-03-11T15:44:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 5a92c380094b8168ae2a6b2216a0053c

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5a92c380094b8168ae2a6b2216a0053cSHA1: 7b2b731df7a4b6e4ede438cc742d0aa43010b2daANALYSIS DATE: 2023-03-11T15:44:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a54e2410ede6d7e2b5c09d71f82bce2a

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a54e2410ede6d7e2b5c09d71f82bce2aSHA1: 284fcca666ea40c49d6037b09c8cb5675c63e356ANALYSIS DATE: 2023-03-11T15:44:47ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – avaddon – 9f0f396edd98f347ba72634814d9958e

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 9f0f396edd98f347ba72634814d9958eSHA1: 334b98749279e793ea861ec4e868101314077592ANALYSIS DATE: 2023-03-11T15:54:45ZTTPS: T1082, T1088, T1089, T1112, T1130, T1012, T1120,...

Malware Analysis – avaddon – a071fce53e2bf9fb9a2db5ce91c511ef

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: a071fce53e2bf9fb9a2db5ce91c511efSHA1: addf8230e78fa84c8b9c1b3bac4162a82e6421b4ANALYSIS DATE: 2023-03-11T15:54:43ZTTPS: T1082, T1107, T1490, T1088, T1089, T1112, T1012,...

Malware Analysis – avaddon – 8f51096756e54fda6bedd87f3d5d8a6d

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 8f51096756e54fda6bedd87f3d5d8a6dSHA1: 77a16be6841337b467e9b27f33e0e30decda0e92ANALYSIS DATE: 2023-03-11T15:54:46ZTTPS: T1082, T1088, T1089, T1112, T1060, T1107, T1490,...

Malware Analysis – avaddon – 5ea6f26b734ba366c801dbc4bef0ad28

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: 5ea6f26b734ba366c801dbc4bef0ad28SHA1: 232ce5cb35b9c930da0cfcb07d074aecd8f30a28ANALYSIS DATE: 2023-03-11T15:54:44ZTTPS: T1107, T1490, T1082, T1012, T1120, T1088, T1089, T1112...

Malware Analysis – avaddon – 145cb17599f245058b5fd7fccb6f0d8a

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: 145cb17599f245058b5fd7fccb6f0d8aSHA1: 4ebfef558949f71b78efd9a874951cac799ecbb3ANALYSIS DATE: 2023-03-11T15:54:53ZTTPS: T1082, T1088, T1089, T1112, T1107, T1490, T1012, T1120...

OSINT

Malware Analysis – djvu – ddf6d8dd27744ee84b53ddc102613c99

Malware Analysis – banker – 177f323985be212c7eb379585119ecc2

Malware Analysis – djvu – 445bb3a7b52a9bd70494d39aed213729

Malware Analysis – amadey – a118a1e07e15162e77cce97c0f921e6a

Malware Analysis – djvu – 6ce6587f733dac1590182b577d1414af

Malware Analysis – evasion – 408a23e5fe991be0faca775f141b0267

Malware Analysis – djvu – c9fb256d422f8bbea2b3f1ed7f4a87c1

Malware Analysis – djvu – 918b9b4d245035565fd159b7202ed708

Malware Analysis – amadey – 224597975b6add35631168fb06f9b20e

Malware Analysis – cerber – 10d74de972a374bb9b35944901556f5f

Malware Analysis – azorult – 968b476f2246e218e34f5a13083ee861

Malware Analysis – djvu – ee86ca0d8ee591be31b0bc612f0184f6

Malware Analysis – djvu – 565255248ac5173c85d3e37dd93c9da6

Malware Analysis – smokeloader – 865c8dfea5a5828278255ef3e5958895

Malware Analysis – smokeloader – 3515b1f929c1143764fc8243e94cd9a1

Malware Analysis – djvu – 5ef6d0054454a4b73abc91f68cd7b2e3

Malware Analysis – smokeloader – 104d5c4fcc1354becfae10ce09f0fb24

Malware Analysis – smokeloader – 5a92c380094b8168ae2a6b2216a0053c

Malware Analysis – smokeloader – a54e2410ede6d7e2b5c09d71f82bce2a

Malware Analysis – avaddon – 9f0f396edd98f347ba72634814d9958e

Malware Analysis – avaddon – a071fce53e2bf9fb9a2db5ce91c511ef

Malware Analysis – avaddon – 8f51096756e54fda6bedd87f3d5d8a6d

Malware Analysis – avaddon – 5ea6f26b734ba366c801dbc4bef0ad28

Malware Analysis – avaddon – 145cb17599f245058b5fd7fccb6f0d8a

[AKIRA] – Ransomware Victim: Christina Development

[AKIRA] – Ransomware Victim: Coilplus

[SAFEPAY] – Ransomware Victim: mcintoshlabs[.]com

[QILIN] – Ransomware Victim: Maine Course Hospitality Group

[DRAGONFORCE] – Ransomware Victim: SAIGON INDUSTRIAL SERVICE

You may have missed