Security

Malware Analysis – smokeloader – 3b22e5432ed609b29d6f2620161debcd

February 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3b22e5432ed609b29d6f2620161debcdSHA1: 3b40352996f3a9db62a39e82c7f92eefa4e73bd3ANALYSIS DATE: 2023-02-12T09:31:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – bf216a294f44d0e6ab8cf375867d0ccc

February 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: bf216a294f44d0e6ab8cf375867d0cccSHA1: 0f2c939a394bed4166500e37dfaf89c18211296aANALYSIS DATE: 2023-02-12T11:35:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e8f4df71d5b432592e1773af5894a497

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e8f4df71d5b432592e1773af5894a497SHA1: c1fbe81d2d02d340c85929b4b9b0e26c4deb2927ANALYSIS DATE: 2023-02-12T11:50:41ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – – d5671758956b39e048680b6a8275e96a

February 12, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: d5671758956b39e048680b6a8275e96aSHA1: 33c341130bf9c93311001a6284692c86fec200efANALYSIS DATE: 2023-02-12T10:29:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – a291f52688753bfec2f04434a6275823

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: a291f52688753bfec2f04434a6275823SHA1: 56f088a229ca6e97b6f9bf97953d22eb0317d7caANALYSIS DATE: 2023-02-12T10:41:53ZTTPS: T1012, T1082,...

Malware Analysis – djvu – 546bd5b73d6424c4f1cab3f906dd208b

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 546bd5b73d6424c4f1cab3f906dd208bSHA1: 547cc739d50e2e10a673a08ceb64dfd612dc5f32ANALYSIS DATE: 2023-02-12T03:16:19ZTTPS: T1082, T1005, T1081, T1053,...

Malware Analysis – evasion – 0f743287c9911b4b1c726c7c7edcaf7d

February 12, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 0f743287c9911b4b1c726c7c7edcaf7dSHA1: 9760579e73095455fcbaddfe1e7e98a2bb28bfe0ANALYSIS DATE: 2023-02-12T03:26:37ZTTPS: T1107, T1490, T1088, T1089, T1112, T1082, T1012, T1060,...

Malware Analysis – ransomware – 68c331be8237bc02fbf7fbb14b4f83a7

February 12, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 68c331be8237bc02fbf7fbb14b4f83a7SHA1: f25e7c36050f186eaad48ae8fddbca1b95eff15fANALYSIS DATE: 2023-02-12T05:03:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 38e31b1be1f167ad2d1d18c746a7c46f

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, ransomwareMD5: 38e31b1be1f167ad2d1d18c746a7c46fSHA1: e1eebc90dae5caab44c04e852e7c31461269ca58ANALYSIS DATE: 2023-02-12T05:12:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 35681210de3f848707e16d15fe032f3b

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, collection, discovery, evasion, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – smokeloader – 8021460702777318a468e62cb10be252

February 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8021460702777318a468e62cb10be252SHA1: fc90f57d99a60a507d1ac9b40a851c7c9c744f3eANALYSIS DATE: 2023-02-12T05:01:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – bbe2e0f186145fe66bf06909cfaf03a7

February 12, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: bbe2e0f186145fe66bf06909cfaf03a7SHA1: 19c9425cf3c6d5a53281b9544eaf6d1eff179767ANALYSIS DATE: 2023-02-12T05:26:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – chaos – 4c19104c6df0817095be0846b1607de6

February 12, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 4c19104c6df0817095be0846b1607de6SHA1: ae3bf7a043cb10e8b206261af6af1558fc3d518bANALYSIS DATE: 2023-02-12T05:26:03ZTTPS: T1490, T1059, T1107, T1005, T1081, T1491, T1112,...

Malware Analysis – chaos – 6f604aeb2e1692200e0079e2c66e3142

February 12, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 6f604aeb2e1692200e0079e2c66e3142SHA1: abb3c0372f463b2e6e33a2465ca52c93e43f69a7ANALYSIS DATE: 2023-02-12T05:26:04ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 4bf3d32d62e3530c55622ef97b9e11b8

February 12, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 4bf3d32d62e3530c55622ef97b9e11b8SHA1: 0f6f2bc85bd254290513018cb0aed59a537fb2c1ANALYSIS DATE: 2023-02-12T05:18:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Security

Malware Analysis – smokeloader – 3b22e5432ed609b29d6f2620161debcd

Malware Analysis – smokeloader – bf216a294f44d0e6ab8cf375867d0ccc

Malware Analysis – djvu – e8f4df71d5b432592e1773af5894a497

Malware Analysis – – d5671758956b39e048680b6a8275e96a

Malware Analysis – djvu – a291f52688753bfec2f04434a6275823

Malware Analysis – djvu – 546bd5b73d6424c4f1cab3f906dd208b

Malware Analysis – evasion – 0f743287c9911b4b1c726c7c7edcaf7d

Malware Analysis – ransomware – 68c331be8237bc02fbf7fbb14b4f83a7

Malware Analysis – djvu – 38e31b1be1f167ad2d1d18c746a7c46f

Malware Analysis – djvu – 35681210de3f848707e16d15fe032f3b

Malware Analysis – smokeloader – 8021460702777318a468e62cb10be252

Malware Analysis – chaos – bbe2e0f186145fe66bf06909cfaf03a7

Malware Analysis – chaos – 4c19104c6df0817095be0846b1607de6

Malware Analysis – chaos – 6f604aeb2e1692200e0079e2c66e3142

Malware Analysis – ransomware – 4bf3d32d62e3530c55622ef97b9e11b8

Cobalt Stike Beacon Detected – 23[.]227[.]203[.]70:80

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]56:80

Cobalt Stike Beacon Detected – 3[.]85[.]177[.]52:80

Cobalt Stike Beacon Detected – 107[.]148[.]149[.]21:443

Cobalt Stike Beacon Detected – 124[.]222[.]24[.]208:2222

Cobalt Stike Beacon Detected – 89[.]107[.]59[.]15:80

Cobalt Stike Beacon Detected – 162[.]254[.]200[.]241:80

Cobalt Stike Beacon Detected – 45[.]9[.]74[.]66:80

Cobalt Stike Beacon Detected – 216[.]83[.]38[.]235:8000

[INTERLOCK] – Ransomware Victim: Your Building Centers

CVE Alert: CVE-2025-27449

CVE Alert: CVE-2025-27450

CVE Alert: CVE-2025-27448

CVE Alert: CVE-2025-27451

You may have missed