Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: eb7cde7a579009ffad981b0913e5eb80SHA1: 5a218c588fefa80e5caae1dce70b53e3a81a997eANALYSIS DATE: 2023-03-22T17:49:28ZTTPS: T1012, T1082, T1053, T1005, T1081,...
Traditional obfuscation techniques tend to add layers to encapsulate standing code, such as base64 or compression. These payloads do continue...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: eedc8762268992134adfad53f79e8f2bSHA1: 8fbb0774255716c23ecf56467ca61a978bca5ac0ANALYSIS DATE: 2023-03-21T17:11:02ZTTPS: T1005, T1081, T1012, T1082, T1060,...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 137e1a10363bdc6bcda337cc0366c4a0SHA1: 17bb4a66bcf72c91dd19dba83ef0df2b75999d8bANALYSIS DATE: 2023-03-21T16:39:21ZTTPS: T1222, T1053, T1005, T1081, T1012,...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 4fb20686bc89af2e05086d23acd03dedSHA1: 1819399d18736fef25382b70f566a343a0190a4dANALYSIS DATE: 2023-03-21T16:32:32ZTTPS: T1012, T1082, T1005, T1081, T1060,...
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:redline, family:rhadamanthys, family:smokeloader, family:vidar, botnet:fronx2, botnet:pub1, botnet:sprg, backdoor, discovery, infostealer, loader, persistence, ransomware,...
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: ade7133a2f4a50a1b7dc122b55778280SHA1: 8413e88ec4b203116cb03cb8c099556be1bee557ANALYSIS...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 3e24b4dda34ee179d93408970ef1fcedSHA1: 5408863a9b5f28a232f4c6d3422c56e16ddd170eANALYSIS DATE: 2023-03-21T17:51:02ZTTPS: T1222, T1053, T1005, T1081, T1060,...
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, trojan, upxMD5: 53ce3a5d1987f019f63a0679a2f25bceSHA1: 1db064653e30ca5e82d122bdc4782dac9e941fbbANALYSIS DATE: 2023-03-21T18:04:33ZTTPS: T1089, T1112, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 1aa5f5e7075595564871a31581070efcSHA1: 403f1d459972dba30f392d869e6ab2d88f5971deANALYSIS DATE: 2023-03-21T18:49:32ZTTPS: T1053, T1012, T1082, T1005, T1081,...
By Cas van Cooten (@chvancooten), with special thanks to some awesome folks: Fabian Mosch (@S3cur3Th1sSh1t) for sharing dynamic invocation implementation...
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:rhadamanthys, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: c0d467a9cc0f89da6d8d730230dd04e4SHA1: 0e61f36578b4b1fac9043e69e3f3fd974808e93aANALYSIS DATE: 2023-03-20T16:00:57ZTTPS: T1222, T1082, T1053, T1005, T1081,...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a6d11d46ecab3e7cd25e2f8e0c1cd1c8SHA1: 2b2d2ef04b27e85b3c680d7282a40f564fc48c6bANALYSIS DATE: 2023-03-20T16:37:33ZTTPS: T1012, T1082, T1005, T1081, T1222,...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: f1f017093eb8a12910035db807549c26SHA1: e4c7edd1ea5c4b087b79ff0bca5170c4aaec6900ANALYSIS DATE: 2023-03-20T16:47:01ZTTPS: T1012, T1082, T1005, T1081, T1222,...
Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 10d79ea476ce434684beb2d4cbe84195SHA1: f08a5c8d45cda499cfb5bf7ff6640495f74df8aaANALYSIS DATE: 2023-03-20T16:40:10ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 36da7db0e753060127bb4690ed9f132cSHA1: b91c6a735e972a2dcbe26d7a8fffab46bc40fed0ANALYSIS...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 1c4144c7b20a7771a52205e9a81ef106SHA1: eabc82495d5fd0d7ca8664b28199717f8503839dANALYSIS DATE: 2023-03-20T17:56:44ZTTPS: T1005, T1081, T1012, T1053, T1082,...
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1ba8969f1a68b563b7f3a8dca10dbf2bSHA1: b6683d2e0c786dc907119a654e902a664ea13282ANALYSIS DATE: 2023-03-20T17:18:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:rhadamanthys, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, loader, persistence, ransomware, spyware, stealer, trojanMD5:...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b9528172de91f451c061b587411f307eSHA1: 1b4cd6672ab4c40eabce8d713d797921c5150ceaANALYSIS DATE: 2023-03-20T17:06:54ZTTPS: T1012, T1082, T1060, T1112, T1222,...
The plugin is created to help automated scanning using Burp in the following scenarios: Access/Refresh token Token replacement in XML,JSON...
The script FindUncommonShares.py is a Python equivalent of PowerView's Invoke-ShareFinder.ps1 allowing to quickly find uncommon shares in vast Windows...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 1286bece590bfcc785000c42c0306e51SHA1: 7b6ec7d4f5137e2f938f2dd4d8f4e6172f4a4681ANALYSIS DATE: 2023-03-19T16:58:17ZTTPS: T1082, T1005, T1081, T1012,...
