threatintel

Malware Analysis – smokeloader – 105f0b06dc371dcaa47c49a1d9f6792a

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 105f0b06dc371dcaa47c49a1d9f6792aSHA1: cab90e70744e792b89e17ad708d321d306bdaa0aANALYSIS DATE: 2023-05-01T15:22:38ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – de4a593a21de256210a1d0bd0588302e

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: de4a593a21de256210a1d0bd0588302eSHA1: 5fce4c5267c1a600368dcefdcf58211bdebd6dacANALYSIS DATE: 2023-05-01T15:21:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 134f9f18d30fc723f358fccfefbe1cf4

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 134f9f18d30fc723f358fccfefbe1cf4SHA1: ba3e5b0cb37b0044294055b9553eeefacfd0d902ANALYSIS DATE: 2023-05-01T15:32:57ZTTPS: T1012, T1222, T1005, T1081,...

Malware Analysis – amadey – fb51120a16bb337cc8cb3242d01df83f

May 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1616034f091df9fd0229bc38dd17597f, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:pub1, botnet:sprg, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – smokeloader – d09ea65a32c1e2ad430ac9f077c5405a

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d09ea65a32c1e2ad430ac9f077c5405aSHA1: 6e0e2ae65ba707b3681e02026c8c64bdd671cf7dANALYSIS DATE: 2023-05-01T15:31:13ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 16d35089d57c03de0258c0897710f2e9

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 16d35089d57c03de0258c0897710f2e9SHA1: 4cc712ed1ed4867f6f2d874ab7ad843abac43af6ANALYSIS DATE: 2023-05-01T15:31:00ZTTPS: T1053, T1130, T1112, T1060, T1222,...

Malware Analysis – djvu – c866040dc5bafd88f3b12fa63eaef0b4

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: c866040dc5bafd88f3b12fa63eaef0b4SHA1: 08e94841f4765adc3891daee728d9de03a3b9375ANALYSIS DATE: 2023-05-01T15:33:19ZTTPS: T1082, T1053, T1130, T1112, T1060,...

Malware Analysis – wannacry – 780dd7926a05a54889a1df7c717c4b75

May 1, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 780dd7926a05a54889a1df7c717c4b75SHA1: 486d66e8f23c4c2998d30214531307de998c8b9cANALYSIS DATE: 2023-05-01T15:33:51ZTTPS: T1046, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 5849b1b61e88f7461064b986a204b9c7

May 1, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 5849b1b61e88f7461064b986a204b9c7SHA1: f9b447d8ea1645afcf7e2bebea2881c88e7c34adANALYSIS DATE: 2023-05-01T15:33:56ZTTPS: T1046, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 0fdf742ed3f86d75f58080e1c1b0d5c9

May 1, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0fdf742ed3f86d75f58080e1c1b0d5c9SHA1: 9a745882cc9acc2c087d7e0d5a3be66bf9c5a840ANALYSIS DATE: 2023-05-01T15:33:52ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 8fad38968affbefc8cbf9a0f34c51a7b

May 1, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 8fad38968affbefc8cbf9a0f34c51a7bSHA1: 4d153f17c543e00c5440bb75a1a1a0a3427de906ANALYSIS DATE: 2023-05-01T15:34:05ZTTPS: T1046, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 7990f321b538eeffedcaa37c98093783

May 1, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7990f321b538eeffedcaa37c98093783SHA1: 2e8a2b5d12a6d282d9c3e13504a9fc8ed8aaf694ANALYSIS DATE: 2023-05-01T15:34:01ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – chaos – db472ec2bee48bc9b193c57866906b79

May 1, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: db472ec2bee48bc9b193c57866906b79SHA1: 988fc9c4f56ca78d0efc3488b5370dfc8c254b34ANALYSIS DATE: 2023-05-01T15:34:06ZTTPS: T1082, T1005, T1081, T1491, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 35ddab0d213703ddef37431caae4e6e4

May 1, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, spyware, stealer, wormMD5: 35ddab0d213703ddef37431caae4e6e4SHA1: 47a589d219f7693bdfbf5f2a6cb9464a41047daaANALYSIS DATE: 2023-05-01T15:34:09ZTTPS: T1046, T1012, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – chaos – dadd671cb68e7e8d56d580af4ac25ccb

May 1, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: dadd671cb68e7e8d56d580af4ac25ccbSHA1: 6a01edb8d371386f7578f1b7f3701ff541cfac06ANALYSIS DATE: 2023-05-01T15:34:22ZTTPS: T1082, T1005, T1081, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – chaos – 4bdfd6c13f310e0bed5cba97132c5fc2

May 1, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 4bdfd6c13f310e0bed5cba97132c5fc2SHA1: 861a9a88d8ca4477db4b7cec1956788d474cb686ANALYSIS DATE: 2023-05-01T15:34:14ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012, T1491,...

Malware Analysis – gandcrab – 84581e88899b708baa7d514da1a4791f

May 1, 2023

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, family:neshta, backdoor, persistence, ransomware, spyware, stealerMD5: 84581e88899b708baa7d514da1a4791fSHA1: 768704837b8b86b8110cac99d64456667126bc15ANALYSIS DATE: 2023-05-01T15:34:10ZTTPS: T1012, T1120, T1082, T1005, T1081,...

Malware Analysis – lockbit – 5fac45e8b565bda371ae257d4248e6ae

May 1, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: 5fac45e8b565bda371ae257d4248e6aeSHA1: 2ac8ac40b6f7b3c586b01bb1eef91c78dde25b8aANALYSIS DATE: 2023-05-01T15:34:18ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 0c7fa2763274d1d3163b4b62294ee91e

May 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 0c7fa2763274d1d3163b4b62294ee91eSHA1: 60ef57a35ceb23f07ab74db19d69e47351d7689bANALYSIS DATE: 2023-05-01T15:34:32ZTTPS: T1060, T1112, T1158, T1088, T1089, T1082,...

Malware Analysis – evasion – 0cf7c577867d917a061e099c04b3ab08

May 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, trojanMD5: 0cf7c577867d917a061e099c04b3ab08SHA1: 3d1283d3f1d9f29beefc13bbb35257947432f558ANALYSIS DATE: 2023-05-01T15:34:32ZTTPS: T1082, T1060, T1112, T1158, T1088, T1089 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 185b6b4ff68fa6a0370fda4c71ab4228

May 1, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 185b6b4ff68fa6a0370fda4c71ab4228SHA1: e7cb2e3241bcb675e9a7706881c8b3edfc74c058ANALYSIS DATE: 2023-05-01T15:34:25ZTTPS: T1046, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – lockbit – f2841dc12a50a26853a598ec3918e3a7

May 1, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: f2841dc12a50a26853a598ec3918e3a7SHA1: 88f68d23840bad6ae554ee6851a4847ebbf1f91dANALYSIS DATE: 2023-05-01T15:34:26ZTTPS: T1005, T1081, T1130, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – 198eda6f29601c86ec2e7fe8f924010a

May 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 198eda6f29601c86ec2e7fe8f924010aSHA1: 041a11f5530be4a204d86a34b76d0ff39fe047bfANALYSIS DATE: 2023-05-01T15:34:40ZTTPS: T1082, T1158, T1112, T1060, T1004, T1088,...

Malware Analysis – chaos – 1a518f8b355c474d260acd7fb4ebfad7

May 1, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 1a518f8b355c474d260acd7fb4ebfad7SHA1: c5e0557042833bcfb2965c835fff79b0ffc68f19ANALYSIS DATE: 2023-05-01T15:34:41ZTTPS: T1490, T1059, T1107, T1060, T1112, T1012,...

threatintel

Malware Analysis – smokeloader – 105f0b06dc371dcaa47c49a1d9f6792a

Malware Analysis – smokeloader – de4a593a21de256210a1d0bd0588302e

Malware Analysis – djvu – 134f9f18d30fc723f358fccfefbe1cf4

Malware Analysis – amadey – fb51120a16bb337cc8cb3242d01df83f

Malware Analysis – smokeloader – d09ea65a32c1e2ad430ac9f077c5405a

Malware Analysis – djvu – 16d35089d57c03de0258c0897710f2e9

Malware Analysis – djvu – c866040dc5bafd88f3b12fa63eaef0b4

Malware Analysis – wannacry – 780dd7926a05a54889a1df7c717c4b75

Malware Analysis – wannacry – 5849b1b61e88f7461064b986a204b9c7

Malware Analysis – ransomware – 0fdf742ed3f86d75f58080e1c1b0d5c9

Malware Analysis – wannacry – 8fad38968affbefc8cbf9a0f34c51a7b

Malware Analysis – ransomware – 7990f321b538eeffedcaa37c98093783

Malware Analysis – chaos – db472ec2bee48bc9b193c57866906b79

Malware Analysis – wannacry – 35ddab0d213703ddef37431caae4e6e4

Malware Analysis – chaos – dadd671cb68e7e8d56d580af4ac25ccb

Malware Analysis – chaos – 4bdfd6c13f310e0bed5cba97132c5fc2

Malware Analysis – gandcrab – 84581e88899b708baa7d514da1a4791f

Malware Analysis – lockbit – 5fac45e8b565bda371ae257d4248e6ae

Malware Analysis – evasion – 0c7fa2763274d1d3163b4b62294ee91e

Malware Analysis – evasion – 0cf7c577867d917a061e099c04b3ab08

Malware Analysis – wannacry – 185b6b4ff68fa6a0370fda4c71ab4228

Malware Analysis – lockbit – f2841dc12a50a26853a598ec3918e3a7

Malware Analysis – evasion – 198eda6f29601c86ec2e7fe8f924010a

Malware Analysis – chaos – 1a518f8b355c474d260acd7fb4ebfad7

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed