threatintel

Malware Analysis – evasion – 408a23e5fe991be0faca775f141b0267

March 12, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 408a23e5fe991be0faca775f141b0267SHA1: 53b74fce9918d4d0d70d945830c52973d1e0c898ANALYSIS DATE: 2023-03-11T22:35:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 918b9b4d245035565fd159b7202ed708

March 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 918b9b4d245035565fd159b7202ed708SHA1: fecbb56a0a4debd0092039ff427ea7f18a93cf93ANALYSIS DATE: 2023-03-11T23:25:16ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – amadey – 224597975b6add35631168fb06f9b20e

March 12, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, ransomware, stealer, trojanMD5: 224597975b6add35631168fb06f9b20eSHA1: b52b85a40b55aeb58a4543ce94caa734333c950cANALYSIS...

Malware Analysis – cerber – 10d74de972a374bb9b35944901556f5f

March 12, 2023

Score: 10 MALWARE FAMILY: cerberTAGS:family:cerber, discovery, evasion, ransomwareMD5: 10d74de972a374bb9b35944901556f5fSHA1: 593f11e2aa70a1508d5e58ea65bec0ae04b68d64ANALYSIS DATE: 2023-03-11T23:55:16ZTTPS: T1046, T1012, T1120, T1082, T1018, T1031, T1491, T1112...

Malware Analysis – djvu – c9fb256d422f8bbea2b3f1ed7f4a87c1

March 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: c9fb256d422f8bbea2b3f1ed7f4a87c1SHA1: 5c8b864d64fa017390fb12a054c7606b2b781e4cANALYSIS DATE: 2023-03-11T23:25:44ZTTPS: T1053, T1012, T1082, T1005,...

Malware Analysis – azorult – 968b476f2246e218e34f5a13083ee861

March 11, 2023

Score: 10 MALWARE FAMILY: azorultTAGS:family:azorult, family:chimera, family:lokibot, family:rms, aspackv2, collection, discovery, evasion, infostealer, persistence, ransomware, rat, spyware, stealer, trojan, upxMD5:...

Malware Analysis – djvu – ee86ca0d8ee591be31b0bc612f0184f6

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: ee86ca0d8ee591be31b0bc612f0184f6SHA1: a24934b0c07ca0522b5f0242565e7433fe5f6927ANALYSIS DATE: 2023-03-11T15:04:52ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – smokeloader – 865c8dfea5a5828278255ef3e5958895

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 865c8dfea5a5828278255ef3e5958895SHA1: d5f5e6de01ce864d433ae01609ebd16f2d7ed5a8ANALYSIS DATE: 2023-03-11T15:15:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 3515b1f929c1143764fc8243e94cd9a1

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3515b1f929c1143764fc8243e94cd9a1SHA1: a7724b75b5dc54d69fd568614a601dab31321cd8ANALYSIS DATE: 2023-03-11T15:37:32ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 565255248ac5173c85d3e37dd93c9da6

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 565255248ac5173c85d3e37dd93c9da6SHA1: dd8e1b95db664a4c2223f8c926967167d7801221ANALYSIS DATE: 2023-03-11T15:05:26ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – djvu – 5ef6d0054454a4b73abc91f68cd7b2e3

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 5ef6d0054454a4b73abc91f68cd7b2e3SHA1: 20ca9e635d05426c9b61130161fe882f92236cf9ANALYSIS DATE: 2023-03-11T15:51:09ZTTPS: T1222, T1005, T1081, T1082,...

Malware Analysis – smokeloader – 104d5c4fcc1354becfae10ce09f0fb24

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 104d5c4fcc1354becfae10ce09f0fb24SHA1: 971ab0be3950346706add04bad69028a641355a1ANALYSIS DATE: 2023-03-11T15:44:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 5a92c380094b8168ae2a6b2216a0053c

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5a92c380094b8168ae2a6b2216a0053cSHA1: 7b2b731df7a4b6e4ede438cc742d0aa43010b2daANALYSIS DATE: 2023-03-11T15:44:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a54e2410ede6d7e2b5c09d71f82bce2a

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a54e2410ede6d7e2b5c09d71f82bce2aSHA1: 284fcca666ea40c49d6037b09c8cb5675c63e356ANALYSIS DATE: 2023-03-11T15:44:47ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – avaddon – 9f0f396edd98f347ba72634814d9958e

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 9f0f396edd98f347ba72634814d9958eSHA1: 334b98749279e793ea861ec4e868101314077592ANALYSIS DATE: 2023-03-11T15:54:45ZTTPS: T1082, T1088, T1089, T1112, T1130, T1012, T1120,...

Malware Analysis – avaddon – a071fce53e2bf9fb9a2db5ce91c511ef

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: a071fce53e2bf9fb9a2db5ce91c511efSHA1: addf8230e78fa84c8b9c1b3bac4162a82e6421b4ANALYSIS DATE: 2023-03-11T15:54:43ZTTPS: T1082, T1107, T1490, T1088, T1089, T1112, T1012,...

Malware Analysis – avaddon – 8f51096756e54fda6bedd87f3d5d8a6d

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 8f51096756e54fda6bedd87f3d5d8a6dSHA1: 77a16be6841337b467e9b27f33e0e30decda0e92ANALYSIS DATE: 2023-03-11T15:54:46ZTTPS: T1082, T1088, T1089, T1112, T1060, T1107, T1490,...

Malware Analysis – avaddon – 5ea6f26b734ba366c801dbc4bef0ad28

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: 5ea6f26b734ba366c801dbc4bef0ad28SHA1: 232ce5cb35b9c930da0cfcb07d074aecd8f30a28ANALYSIS DATE: 2023-03-11T15:54:44ZTTPS: T1107, T1490, T1082, T1012, T1120, T1088, T1089, T1112...

Malware Analysis – avaddon – 37c880cd7d92ba4201db8985971bcf98

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 37c880cd7d92ba4201db8985971bcf98SHA1: 80704180991ff9b493da78032ea071b2d3221ec1ANALYSIS DATE: 2023-03-11T15:54:50ZTTPS: T1112, T1060, T1082, T1088, T1089, T1107, T1490,...

Malware Analysis – djvu – b036716c3f9ac55b6474de4aba85fd94

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: b036716c3f9ac55b6474de4aba85fd94SHA1: f7bd8dc2b12e6d7125d66abd41cc22705ed78971ANALYSIS DATE: 2023-03-11T16:14:04ZTTPS: T1130, T1112, T1053, T1005,...

Malware Analysis – avaddon – 145cb17599f245058b5fd7fccb6f0d8a

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: 145cb17599f245058b5fd7fccb6f0d8aSHA1: 4ebfef558949f71b78efd9a874951cac799ecbb3ANALYSIS DATE: 2023-03-11T15:54:53ZTTPS: T1082, T1088, T1089, T1112, T1107, T1490, T1012, T1120...

Malware Analysis – avaddon – 93130b2a1f14c0518e7320a9e9802807

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 93130b2a1f14c0518e7320a9e9802807SHA1: 10ea43cae274915aa0a42b16a8485a90962139f7ANALYSIS DATE: 2023-03-11T15:54:49ZTTPS: T1088, T1089, T1112, T1107, T1490, T1082, T1012,...

Malware Analysis – djvu – 77aaf1d9fe73f9e880fc692d1d410029

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 77aaf1d9fe73f9e880fc692d1d410029SHA1: 6dc62a2cd2079e9a32137471778ae7e46cc54d46ANALYSIS DATE: 2023-03-11T16:41:20ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – evasion – bd4787c247bf809d94d3b16d5243730c

March 11, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: bd4787c247bf809d94d3b16d5243730cSHA1: 789066dd4e4187e5d0a5ea3c2166970bcbfe2ab8ANALYSIS DATE: 2023-03-11T16:35:59ZTTPS: T1088, T1089, T1112, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

threatintel

Malware Analysis – evasion – 408a23e5fe991be0faca775f141b0267

Malware Analysis – djvu – 918b9b4d245035565fd159b7202ed708

Malware Analysis – amadey – 224597975b6add35631168fb06f9b20e

Malware Analysis – cerber – 10d74de972a374bb9b35944901556f5f

Malware Analysis – djvu – c9fb256d422f8bbea2b3f1ed7f4a87c1

Malware Analysis – azorult – 968b476f2246e218e34f5a13083ee861

Malware Analysis – djvu – ee86ca0d8ee591be31b0bc612f0184f6

Malware Analysis – smokeloader – 865c8dfea5a5828278255ef3e5958895

Malware Analysis – smokeloader – 3515b1f929c1143764fc8243e94cd9a1

Malware Analysis – djvu – 565255248ac5173c85d3e37dd93c9da6

Malware Analysis – djvu – 5ef6d0054454a4b73abc91f68cd7b2e3

Malware Analysis – smokeloader – 104d5c4fcc1354becfae10ce09f0fb24

Malware Analysis – smokeloader – 5a92c380094b8168ae2a6b2216a0053c

Malware Analysis – smokeloader – a54e2410ede6d7e2b5c09d71f82bce2a

Malware Analysis – avaddon – 9f0f396edd98f347ba72634814d9958e

Malware Analysis – avaddon – a071fce53e2bf9fb9a2db5ce91c511ef

Malware Analysis – avaddon – 8f51096756e54fda6bedd87f3d5d8a6d

Malware Analysis – avaddon – 5ea6f26b734ba366c801dbc4bef0ad28

Malware Analysis – avaddon – 37c880cd7d92ba4201db8985971bcf98

Malware Analysis – djvu – b036716c3f9ac55b6474de4aba85fd94

Malware Analysis – avaddon – 145cb17599f245058b5fd7fccb6f0d8a

Malware Analysis – avaddon – 93130b2a1f14c0518e7320a9e9802807

Malware Analysis – djvu – 77aaf1d9fe73f9e880fc692d1d410029

Malware Analysis – evasion – bd4787c247bf809d94d3b16d5243730c

CVE Alert: CVE-2025-12399 – alexreservations – Alex Reservations: Smart Restaurant Booking

CVE Alert: CVE-2025-12099 – academylms – Academy LMS – WordPress LMS Plugin for Complete eLearning Solution

CVE Alert: CVE-2025-9334 – codesolz – Better Find and Replace – AI-Powered Suggestions

CVE Alert: CVE-2025-11967 – getwpfunnels – Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more

[DRAGONFORCE] – Ransomware Victim: DCS TECHNOLOGIES INC[.]

You may have missed