threatintel

Malware Analysis – djvu – cc4c818c90433a7440330b6a64889d53

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: cc4c818c90433a7440330b6a64889d53SHA1: da919501a70b927699b598624380303e0219067cANALYSIS DATE: 2023-05-01T15:03:23ZTTPS: T1130, T1112, T1053, T1060, T1222,...

Malware Analysis – djvu – 41b9d70907bbf3d31874a26b2a36a1d2

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 41b9d70907bbf3d31874a26b2a36a1d2SHA1: 1a8843e385b4569511fb51207ace79575993a8afANALYSIS DATE: 2023-05-01T15:03:52ZTTPS: T1060, T1112, T1222, T1082, T1130,...

Malware Analysis – djvu – f08edf8ca763966b609759256ce3f792

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: f08edf8ca763966b609759256ce3f792SHA1: 25764bb37ecbbfcbdd1f833fb534ca5289f224baANALYSIS DATE: 2023-05-01T15:07:18ZTTPS: T1060, T1112, T1082, T1053, T1130,...

Malware Analysis – djvu – 214d7ffb57660b3c12a8885b61d834b4

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 214d7ffb57660b3c12a8885b61d834b4SHA1: 99b8a03835cfc05f5570d8498ff10bf2a3190a4dANALYSIS DATE: 2023-05-01T15:04:03ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – smokeloader – 90be0312184056af9fe1a4694efe6fbf

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 90be0312184056af9fe1a4694efe6fbfSHA1: c890964a52a2fea2c4a3ad6d00538d7158b73e4aANALYSIS DATE: 2023-05-01T15:09:17ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c25323a2ab8f459ab605321827845d01

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: c25323a2ab8f459ab605321827845d01SHA1: 05b1d7ac739818232d6dcd2c64839dd31dc19b7bANALYSIS DATE: 2023-05-01T15:08:28ZTTPS: T1053, T1130, T1112, T1060, T1222,...

Malware Analysis – smokeloader – 468699a932a8f170e534f4dbc024c959

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 468699a932a8f170e534f4dbc024c959SHA1: 34994fbcf70f9f13d156545243b1dfc2904ccc1fANALYSIS DATE: 2023-05-01T15:07:32ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – e3645d38b565b7971909110cb457f6b5

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e3645d38b565b7971909110cb457f6b5SHA1: aa83d763f0aa9189ec5f27ec42d02b25a15aa46bANALYSIS DATE: 2023-05-01T15:09:31ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 100e418e50c70f2115a87ddcf42c5722

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 100e418e50c70f2115a87ddcf42c5722SHA1: d0998c47026ebce6af73a18baed9f0bc4289cb31ANALYSIS DATE: 2023-05-01T15:14:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ddf27a05d86bdc8e35bca06676534812

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: ddf27a05d86bdc8e35bca06676534812SHA1: 1248c96cd308074ebb4cc845d83c2b1771cad3f3ANALYSIS DATE: 2023-05-01T15:10:46ZTTPS: T1130, T1112, T1222, T1060, T1082,...

Malware Analysis – djvu – fb791755fa7ef0b7d32524331179e71c

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: fb791755fa7ef0b7d32524331179e71cSHA1: 8dd0fc69cbe3578048683b81c342a359e68a0176ANALYSIS DATE: 2023-05-01T15:13:09ZTTPS: T1053, T1130, T1112, T1060, T1222,...

Malware Analysis – djvu – e53fc99c657d9ba1bd294a34a27e11f0

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: e53fc99c657d9ba1bd294a34a27e11f0SHA1: 15014bd2d0ec71df5099a1afb53d9434e1aef1c4ANALYSIS DATE: 2023-05-01T15:09:42ZTTPS: T1053, T1222, T1060, T1112, T1082,...

Malware Analysis – smokeloader – 102e8427b586b6115adca5c0e454fe64

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 102e8427b586b6115adca5c0e454fe64SHA1: 374f48496cecc5a249e73858dd0e46ba2911b17eANALYSIS DATE: 2023-05-01T15:19:31ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 69f9147440bbffa66f8b55869c22fc31

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 69f9147440bbffa66f8b55869c22fc31SHA1: 719696217d09eb75c09c330c0238fc0017cafe71ANALYSIS DATE: 2023-05-01T15:18:39ZTTPS: T1060, T1112, T1222, T1082, T1053,...

Malware Analysis – djvu – 3fdfe8ffc7789f9e355edad1fd5f6db5

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 3fdfe8ffc7789f9e355edad1fd5f6db5SHA1: 07bc833cea15b4c32d65ee04cd604f9aa295ef15ANALYSIS DATE: 2023-05-01T15:16:50ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – smokeloader – 976f479b4be0afc04f48dcfc83ceee86

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 976f479b4be0afc04f48dcfc83ceee86SHA1: 9c064c9108f1d9214f241827a10796ec3d67e349ANALYSIS DATE: 2023-05-01T15:19:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – dd51000228ae5517c9ffe803f297a886

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: dd51000228ae5517c9ffe803f297a886SHA1: a199f303f0b7cc164a64a8ef4261d4166596e2c9ANALYSIS DATE: 2023-05-01T15:26:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5ea3074cc921ec7d7e52c741055eb7be

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 5ea3074cc921ec7d7e52c741055eb7beSHA1: 3b564eb3b3676c82786e3fcb759a50cfb5c503e6ANALYSIS DATE: 2023-05-01T15:20:22ZTTPS: T1222, T1060, T1112, T1082, T1130,...

Malware Analysis – smokeloader – 105f0b06dc371dcaa47c49a1d9f6792a

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 105f0b06dc371dcaa47c49a1d9f6792aSHA1: cab90e70744e792b89e17ad708d321d306bdaa0aANALYSIS DATE: 2023-05-01T15:22:38ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – de4a593a21de256210a1d0bd0588302e

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: de4a593a21de256210a1d0bd0588302eSHA1: 5fce4c5267c1a600368dcefdcf58211bdebd6dacANALYSIS DATE: 2023-05-01T15:21:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 134f9f18d30fc723f358fccfefbe1cf4

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 134f9f18d30fc723f358fccfefbe1cf4SHA1: ba3e5b0cb37b0044294055b9553eeefacfd0d902ANALYSIS DATE: 2023-05-01T15:32:57ZTTPS: T1012, T1222, T1005, T1081,...

Malware Analysis – amadey – fb51120a16bb337cc8cb3242d01df83f

May 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1616034f091df9fd0229bc38dd17597f, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:pub1, botnet:sprg, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – smokeloader – d09ea65a32c1e2ad430ac9f077c5405a

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d09ea65a32c1e2ad430ac9f077c5405aSHA1: 6e0e2ae65ba707b3681e02026c8c64bdd671cf7dANALYSIS DATE: 2023-05-01T15:31:13ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 16d35089d57c03de0258c0897710f2e9

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 16d35089d57c03de0258c0897710f2e9SHA1: 4cc712ed1ed4867f6f2d874ab7ad843abac43af6ANALYSIS DATE: 2023-05-01T15:31:00ZTTPS: T1053, T1130, T1112, T1060, T1222,...

threatintel

Malware Analysis – djvu – cc4c818c90433a7440330b6a64889d53

Malware Analysis – djvu – 41b9d70907bbf3d31874a26b2a36a1d2

Malware Analysis – djvu – f08edf8ca763966b609759256ce3f792

Malware Analysis – djvu – 214d7ffb57660b3c12a8885b61d834b4

Malware Analysis – smokeloader – 90be0312184056af9fe1a4694efe6fbf

Malware Analysis – djvu – c25323a2ab8f459ab605321827845d01

Malware Analysis – smokeloader – 468699a932a8f170e534f4dbc024c959

Malware Analysis – smokeloader – e3645d38b565b7971909110cb457f6b5

Malware Analysis – smokeloader – 100e418e50c70f2115a87ddcf42c5722

Malware Analysis – djvu – ddf27a05d86bdc8e35bca06676534812

Malware Analysis – djvu – fb791755fa7ef0b7d32524331179e71c

Malware Analysis – djvu – e53fc99c657d9ba1bd294a34a27e11f0

Malware Analysis – smokeloader – 102e8427b586b6115adca5c0e454fe64

Malware Analysis – djvu – 69f9147440bbffa66f8b55869c22fc31

Malware Analysis – djvu – 3fdfe8ffc7789f9e355edad1fd5f6db5

Malware Analysis – smokeloader – 976f479b4be0afc04f48dcfc83ceee86

Malware Analysis – smokeloader – dd51000228ae5517c9ffe803f297a886

Malware Analysis – djvu – 5ea3074cc921ec7d7e52c741055eb7be

Malware Analysis – smokeloader – 105f0b06dc371dcaa47c49a1d9f6792a

Malware Analysis – smokeloader – de4a593a21de256210a1d0bd0588302e

Malware Analysis – djvu – 134f9f18d30fc723f358fccfefbe1cf4

Malware Analysis – amadey – fb51120a16bb337cc8cb3242d01df83f

Malware Analysis – smokeloader – d09ea65a32c1e2ad430ac9f077c5405a

Malware Analysis – djvu – 16d35089d57c03de0258c0897710f2e9

[AKIRA] – Ransomware Victim: Christina Development

[AKIRA] – Ransomware Victim: Coilplus

[SAFEPAY] – Ransomware Victim: mcintoshlabs[.]com

[QILIN] – Ransomware Victim: Maine Course Hospitality Group

[DRAGONFORCE] – Ransomware Victim: SAIGON INDUSTRIAL SERVICE

You may have missed