threatintel

Malware Analysis – evasion – 6de7324c37519831cf586e3b2c786e53

April 25, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6de7324c37519831cf586e3b2c786e53SHA1: abb423454abd2caa431634667903640037b6ee9bANALYSIS DATE: 2023-04-25T17:27:10ZTTPS: T1158, T1112, T1491, T1012, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – persistence – bf39f469e4af87274c2b97134fabdc93

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: bf39f469e4af87274c2b97134fabdc93SHA1: bbc7b5877148271a572ef3899de7be51a7c1cd6aANALYSIS DATE: 2023-04-25T17:27:11ZTTPS: T1082, T1012, T1120, T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – f7e8ecd1c4c33376c490196509503d5d

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: f7e8ecd1c4c33376c490196509503d5dSHA1: 52052c6c2291fb268e7cf36fa481f82712b880e3ANALYSIS DATE: 2023-04-25T17:27:11ZTTPS: T1060, T1112, T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 48237318fe0b0c7f472c31141903be8f

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 48237318fe0b0c7f472c31141903be8fSHA1: 2e4bc11981a2058285d96454eb14ba335b1afe64ANALYSIS DATE: 2023-04-25T17:27:11ZTTPS: T1012, T1120, T1082, T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – ab68413f9685bfac416520b220b4e49b

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: ab68413f9685bfac416520b220b4e49bSHA1: adf4e3925c2965be9487659ca606a86b61951093ANALYSIS DATE: 2023-04-25T17:27:12ZTTPS: T1060, T1112, T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – a5dfab7a679bb358f0650bff59a02cdc

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a5dfab7a679bb358f0650bff59a02cdcSHA1: f5051b79bbbce0ef9af3e47112e7d825c5fe0800ANALYSIS DATE: 2023-04-25T17:27:12ZTTPS: T1082, T1060, T1112, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – e3c267738f67276083b24d569757da8b

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e3c267738f67276083b24d569757da8bSHA1: 6d57305a13e7d811166e0daaf0cd7eac0772f726ANALYSIS DATE: 2023-04-25T17:27:12ZTTPS: T1082, T1112, T1060, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – dbfb3cab8256d5cf12ccec4a75ac7a32

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: dbfb3cab8256d5cf12ccec4a75ac7a32SHA1: 58b9373549cc649ebfd7e7ff279065696bbd6bd5ANALYSIS DATE: 2023-04-25T17:27:12ZTTPS: T1060, T1112, T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 370546a376345688e5ad3ef836e2ea78

April 25, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 370546a376345688e5ad3ef836e2ea78SHA1: bebff2850dad06a48426e569f526f01df6e024ebANALYSIS DATE: 2023-04-25T17:27:14ZTTPS: T1491, T1112, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 5f74d2826c1fb2b60dbf6d3de14a773d

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 5f74d2826c1fb2b60dbf6d3de14a773dSHA1: 759b2298650613e5ba4654669b1c31ba6b1530bcANALYSIS DATE: 2023-04-25T17:27:15ZTTPS: T1107, T1490, T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – a94f5fa05150bf568a3c2d719ace2c02

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a94f5fa05150bf568a3c2d719ace2c02SHA1: 51bde3d8160a6e9eec4d0f445ef3b27076dddfbfANALYSIS DATE: 2023-04-25T17:27:13ZTTPS: T1012, T1120, T1082, T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 59bff0a38a04c372e4896a4fb2eea8fb

April 25, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 59bff0a38a04c372e4896a4fb2eea8fbSHA1: 2b487ceb3b34cf509b271579160656ca6e1328e2ANALYSIS DATE: 2023-04-25T17:27:14ZTTPS: T1082, T1005, T1081, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – df80cbaadb754de14c97dc05995fdc4a

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: df80cbaadb754de14c97dc05995fdc4aSHA1: 6f9369c9d2f174b4abd642d4fb43cff690f364dfANALYSIS DATE: 2023-04-25T17:27:16ZTTPS: T1107, T1490, T1112, T1012, T1120, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 420b2f010edbc63a68b2cce2cdf1e5e9

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 420b2f010edbc63a68b2cce2cdf1e5e9SHA1: 4cf5072cfe0eb42d387713067e2706902c89b294ANALYSIS DATE: 2023-04-25T17:27:15ZTTPS: T1130, T1112, T1107, T1490, T1082, T1060, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – 3bceadd4c2c546aba24e24307f1defcd

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 3bceadd4c2c546aba24e24307f1defcdSHA1: 81e4110a72821a1b1f01a3f3a8bf89188af40067ANALYSIS DATE: 2023-04-25T17:27:20ZTTPS: T1107, T1490, T1082, T1060, T1112, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 03efa23cb13898fdfda7821ea7dc5e10

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 03efa23cb13898fdfda7821ea7dc5e10SHA1: e25e2f68f0c159378f133d0e161a980d7f148a91ANALYSIS DATE: 2023-04-25T17:27:15ZTTPS: T1082, T1060, T1112, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – e736d07744f89f05460b1f12daeb8172

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e736d07744f89f05460b1f12daeb8172SHA1: 19fb70308f0d47947eb6d2d5b572e96539d345bbANALYSIS DATE: 2023-04-25T17:27:21ZTTPS: T1012, T1120, T1082, T1107, T1490, T1112, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 66f62279e9722368a730adc3b67f2315

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 66f62279e9722368a730adc3b67f2315SHA1: a9804ada1a10d8a5827029342283f6ffeea6f3d3ANALYSIS DATE: 2023-04-25T17:35:04ZTTPS: T1053, T1130, T1112, T1222, T1060,...

Malware Analysis – persistence – a202914a34dc528aa137bd394518d9b0

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a202914a34dc528aa137bd394518d9b0SHA1: 4724934b61687cb1abe96bab137c7b1d4476f271ANALYSIS DATE: 2023-04-25T17:27:21ZTTPS: T1060, T1112, T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 900c5a8f4afb3473c9dac0f984d746f4

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 900c5a8f4afb3473c9dac0f984d746f4SHA1: 00dadacc6119c3e8ccdbe4477da2452d06e8a992ANALYSIS DATE: 2023-04-25T17:32:11ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – quasar – 5ec1610f2529bf6c482f43e8d7cb6235

April 25, 2023

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 5ec1610f2529bf6c482f43e8d7cb6235SHA1: a356a2a69d0551967f133b4b18c43703027e2383ANALYSIS DATE: 2023-04-25T17:40:13ZTTPS: T1107, T1490, T1088, T1089, T1112, T1031,...

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

April 25, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2c2bd73dcba2e7eb7fa78105c84ca2b1SHA1: 24d7defc1e00739461dda0b275bd8304277aafd1ANALYSIS DATE: 2023-04-25T17:37:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

April 25, 2023

Score: 10 MALWARE FAMILY: babukTAGS:family:babuk, family:darkside, ransomwareMD5: f9afb31bc17811e5ab4fa406f105b1feSHA1: d1a9449dcc8a3aa0c887bce71f128866175f679aANALYSIS DATE: 2023-04-25T17:44:04ZTTPS: T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 4bc6e26f6bf9258473180f9805bbe508SHA1: dacc8979f7e59e60be9cb842982ee0deca5b3248ANALYSIS DATE: 2023-04-25T17:41:03ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

threatintel

Malware Analysis – evasion – 6de7324c37519831cf586e3b2c786e53

Malware Analysis – persistence – bf39f469e4af87274c2b97134fabdc93

Malware Analysis – persistence – f7e8ecd1c4c33376c490196509503d5d

Malware Analysis – persistence – 48237318fe0b0c7f472c31141903be8f

Malware Analysis – persistence – ab68413f9685bfac416520b220b4e49b

Malware Analysis – persistence – a5dfab7a679bb358f0650bff59a02cdc

Malware Analysis – persistence – e3c267738f67276083b24d569757da8b

Malware Analysis – persistence – dbfb3cab8256d5cf12ccec4a75ac7a32

Malware Analysis – ransomware – 370546a376345688e5ad3ef836e2ea78

Malware Analysis – persistence – 5f74d2826c1fb2b60dbf6d3de14a773d

Malware Analysis – persistence – a94f5fa05150bf568a3c2d719ace2c02

Malware Analysis – ransomware – 59bff0a38a04c372e4896a4fb2eea8fb

Malware Analysis – persistence – df80cbaadb754de14c97dc05995fdc4a

Malware Analysis – persistence – 420b2f010edbc63a68b2cce2cdf1e5e9

Malware Analysis – persistence – 3bceadd4c2c546aba24e24307f1defcd

Malware Analysis – persistence – 03efa23cb13898fdfda7821ea7dc5e10

Malware Analysis – persistence – e736d07744f89f05460b1f12daeb8172

Malware Analysis – djvu – 66f62279e9722368a730adc3b67f2315

Malware Analysis – persistence – a202914a34dc528aa137bd394518d9b0

Malware Analysis – djvu – 900c5a8f4afb3473c9dac0f984d746f4

Malware Analysis – quasar – 5ec1610f2529bf6c482f43e8d7cb6235

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

[INCRANSOM] – Ransomware Victim: Crompton Lamps, UK

[INCRANSOM] – Ransomware Victim: Huize Sint-Augustinus_BE

[AKIRA] – Ransomware Victim: Goldberg & Osborne

[INCRANSOM] – Ransomware Victim: Wingpoh_SG

[AKIRA] – Ransomware Victim: GreenVest

You may have missed