OSINT

Malware Analysis – avaddon – 93130b2a1f14c0518e7320a9e9802807

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 93130b2a1f14c0518e7320a9e9802807SHA1: 10ea43cae274915aa0a42b16a8485a90962139f7ANALYSIS DATE: 2023-03-11T15:54:49ZTTPS: T1088, T1089, T1112, T1107, T1490, T1082, T1012,...

Malware Analysis – avaddon – 37c880cd7d92ba4201db8985971bcf98

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 37c880cd7d92ba4201db8985971bcf98SHA1: 80704180991ff9b493da78032ea071b2d3221ec1ANALYSIS DATE: 2023-03-11T15:54:50ZTTPS: T1112, T1060, T1082, T1088, T1089, T1107, T1490,...

Malware Analysis – djvu – b036716c3f9ac55b6474de4aba85fd94

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: b036716c3f9ac55b6474de4aba85fd94SHA1: f7bd8dc2b12e6d7125d66abd41cc22705ed78971ANALYSIS DATE: 2023-03-11T16:14:04ZTTPS: T1130, T1112, T1053, T1005,...

Malware Analysis – djvu – 77aaf1d9fe73f9e880fc692d1d410029

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 77aaf1d9fe73f9e880fc692d1d410029SHA1: 6dc62a2cd2079e9a32137471778ae7e46cc54d46ANALYSIS DATE: 2023-03-11T16:41:20ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – evasion – bd4787c247bf809d94d3b16d5243730c

March 11, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: bd4787c247bf809d94d3b16d5243730cSHA1: 789066dd4e4187e5d0a5ea3c2166970bcbfe2ab8ANALYSIS DATE: 2023-03-11T16:35:59ZTTPS: T1088, T1089, T1112, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 5a97dead64d220f172b81f4d9de2a6c3

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 5a97dead64d220f172b81f4d9de2a6c3SHA1: 0b704f55ae59306c6b49916114d8bef6f5192c66ANALYSIS DATE: 2023-03-11T16:40:36ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – chaos – f5b62c5b6c334b0384ec26decc67ee1d

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: f5b62c5b6c334b0384ec26decc67ee1dSHA1: 84ed720f8a90a0c33454016a618c071f680c0dc1ANALYSIS DATE: 2023-03-11T16:41:19ZTTPS: T1490, T1059, T1107, T1012, T1491, T1112, T1082,...

Malware Analysis – chaos – 5e9e6b90b530260d1f6dd462a9a2fa16

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 5e9e6b90b530260d1f6dd462a9a2fa16SHA1: 3caa6e6d2aed85b9ea046a077a972c2a1718ee7bANALYSIS DATE: 2023-03-11T16:45:07ZTTPS: T1490, T1059, T1107, T1082, T1012, T1005, T1081...

Malware Analysis – dharma – a0dd1dfbac4b2aaed94b2065a9c9f30c

March 11, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: a0dd1dfbac4b2aaed94b2065a9c9f30cSHA1: b797000407eb333dc80777dd088204179b62fb5cANALYSIS DATE: 2023-03-11T16:46:30ZTTPS: T1107, T1490, T1112, T1060, T1005, T1081, T1082...

Malware Analysis – phobos – de3118d4369fddeedf5272011350476c

March 11, 2023

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: de3118d4369fddeedf5272011350476cSHA1: f04db253158efe0aa9427e61b7b62ae4a4373660ANALYSIS DATE: 2023-03-11T16:53:04ZTTPS: T1490, T1059, T1107, T1060, T1112, T1005,...

Malware Analysis – lockbit – 927426bafb84fe8daff84cff77258e0d

March 11, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: 927426bafb84fe8daff84cff77258e0dSHA1: 320a91f6b810e4f5dbb38f58fd2949c780d4c807ANALYSIS DATE: 2023-03-11T16:44:08ZTTPS: T1005, T1081, T1012, T1082, T1491, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 2316091f02153ac20dff768513aae1a4

March 11, 2023

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 2316091f02153ac20dff768513aae1a4SHA1: 6b7b1017b9313ab87fccf4ea08a427c1499b89dcANALYSIS DATE: 2023-03-11T16:57:16ZTTPS: T1107, T1490, T1112, T1012, T1120, T1082, T1060, T1222 ScoreMeaningExample10Known...

Malware Analysis – evasion – cec36706e3491210f6fe29a415ade419

March 11, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: cec36706e3491210f6fe29a415ade419SHA1: a6c5246e86fd9bc90f0805236b1676ae5228398fANALYSIS DATE: 2023-03-11T17:06:03ZTTPS: T1012, T1082, T1107, T1490, T1088, T1089, T1112, T1053 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – bb0785cea59f398b48f378ecc18cc51a

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: bb0785cea59f398b48f378ecc18cc51aSHA1: 5cc2527d36f511f479be467d1f785832592f571fANALYSIS DATE: 2023-03-11T17:12:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 2979ed84c4ca3deb2924bd1f26bf88bd

March 11, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 2979ed84c4ca3deb2924bd1f26bf88bdSHA1: 8f01f9112904389e0b53a25506ef69f99cc0fa1bANALYSIS DATE: 2023-03-11T16:58:05ZTTPS: T1222, T1107, T1490, T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – chaos – ba34b55b9b2031776fc958aef2d3bee1

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: ba34b55b9b2031776fc958aef2d3bee1SHA1: dad577c2667c6bb3930a8f3d95687d3a7f2dfca2ANALYSIS DATE: 2023-03-11T17:20:19ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 3995219f721e211ddda920b74a4b4aa5

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 3995219f721e211ddda920b74a4b4aa5SHA1: 2c37c03bdab7e0b77b02c5e298cfe845bdff3096ANALYSIS DATE: 2023-03-11T17:53:59ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – persistence – f592e7faba96a23ee25ff25f3779f44f

March 11, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: f592e7faba96a23ee25ff25f3779f44fSHA1: 66656b81b43130ddd6774845c249700ffb06ceadANALYSIS DATE: 2023-03-11T17:20:04ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – 23591c81d46ac87baf52184f72d5f475

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 23591c81d46ac87baf52184f72d5f475SHA1: 11516bfd63450b217b38e916677e1346269e2d15ANALYSIS DATE: 2023-03-11T17:13:02ZTTPS: T1490, T1059, T1107, T1491, T1112, T1082, T1005,...

OSINT

Malware Analysis – avaddon – 93130b2a1f14c0518e7320a9e9802807

Malware Analysis – avaddon – 37c880cd7d92ba4201db8985971bcf98

Malware Analysis – djvu – b036716c3f9ac55b6474de4aba85fd94

Malware Analysis – djvu – 77aaf1d9fe73f9e880fc692d1d410029

Malware Analysis – evasion – bd4787c247bf809d94d3b16d5243730c

Malware Analysis – djvu – 5a97dead64d220f172b81f4d9de2a6c3

Malware Analysis – chaos – f5b62c5b6c334b0384ec26decc67ee1d

Malware Analysis – chaos – 5e9e6b90b530260d1f6dd462a9a2fa16

Malware Analysis – dharma – a0dd1dfbac4b2aaed94b2065a9c9f30c

Malware Analysis – phobos – de3118d4369fddeedf5272011350476c

Malware Analysis – lockbit – 927426bafb84fe8daff84cff77258e0d

Malware Analysis – discovery – 2316091f02153ac20dff768513aae1a4

Malware Analysis – evasion – cec36706e3491210f6fe29a415ade419

Malware Analysis – smokeloader – bb0785cea59f398b48f378ecc18cc51a

Malware Analysis – discovery – 2979ed84c4ca3deb2924bd1f26bf88bd

Malware Analysis – chaos – ba34b55b9b2031776fc958aef2d3bee1

Malware Analysis – djvu – 3995219f721e211ddda920b74a4b4aa5

Malware Analysis – persistence – f592e7faba96a23ee25ff25f3779f44f

Malware Analysis – chaos – 23591c81d46ac87baf52184f72d5f475

LockBit 3.0 Ransomware Victim: schradercamargo[.]com

LockBit 3.0 Ransomware Victim: grupohospitalarvidas[.]com[.]br

LockBit 3.0 Ransomware Victim: omegaservicos[.]com[.]br

LockBit 3.0 Ransomware Victim: cktc[.]edu

LockBit 3.0 Ransomware Victim: favoritefoods[.]com

[AKIRA] – Ransomware Victim: Christina Development

[AKIRA] – Ransomware Victim: Coilplus

[SAFEPAY] – Ransomware Victim: mcintoshlabs[.]com

[QILIN] – Ransomware Victim: Maine Course Hospitality Group

[DRAGONFORCE] – Ransomware Victim: SAIGON INDUSTRIAL SERVICE

You may have missed