threatintel

Malware Analysis – djvu – c930da72228be1f2154dd5ce35535c0e

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c930da72228be1f2154dd5ce35535c0eSHA1: c43fbf1331a8cf89ae74ded04873325bf6160f81ANALYSIS DATE: 2022-10-05T15:16:43ZTTPS: T1012, T1005, T1081, T1222,...

Malware Analysis – avaddon – bc52d18853a6b575d319692ae8f90fd7

October 5, 2022

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: bc52d18853a6b575d319692ae8f90fd7SHA1: 882b07d029ba27a64f442fa0e3047775667c2957ANALYSIS DATE: 2022-10-05T15:20:26ZTTPS: T1012, T1120, T1082, T1107, T1490, T1088, T1089, T1112...

Malware Analysis – djvu – 1bb973121130046bdca6cf5366891821

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 1bb973121130046bdca6cf5366891821SHA1: cb87eca19a0dc04828c1a4bc6f01894562d97b05ANALYSIS DATE: 2022-10-05T15:39:56ZTTPS:...

Malware Analysis – smokeloader – 1bb973121130046bdca6cf5366891821

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1bb973121130046bdca6cf5366891821SHA1: cb87eca19a0dc04828c1a4bc6f01894562d97b05ANALYSIS DATE: 2022-10-05T15:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 2aa4c7dbfea83658bc01b5bcd0a58178

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2aa4c7dbfea83658bc01b5bcd0a58178SHA1: bb2ba7ea49a4ee5acf64fe4535ef64ca64813b4fANALYSIS DATE: 2022-10-05T15:34:13ZTTPS: T1222, T1012, T1005, T1081,...

Malware Analysis – smokeloader – 1bb973121130046bdca6cf5366891821

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1bb973121130046bdca6cf5366891821SHA1: cb87eca19a0dc04828c1a4bc6f01894562d97b05ANALYSIS DATE: 2022-10-05T15:31:59ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – ff85205dd23b73ced624661171ef5c20

October 5, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ff85205dd23b73ced624661171ef5c20SHA1: a72dad57cdcb556d7d8fb044052132a2e3d6ff52ANALYSIS DATE: 2022-10-05T15:50:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 9a2fc7060a890ac5dae857ba330775ec

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9a2fc7060a890ac5dae857ba330775ecSHA1: 6175729b50b4007f470ae5817612679ae21abd75ANALYSIS DATE: 2022-10-05T15:54:33ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – ba1706454ac5e3a8541f776d4ca961b0

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ba1706454ac5e3a8541f776d4ca961b0SHA1: 1eb730050e4e7981778f05f363ace28262d2f57aANALYSIS DATE: 2022-10-05T15:42:29ZTTPS: T1005, T1081, T1222, T1012,...

Malware Analysis – ransomware – fed98c2820ca40c228ef080ddf68e994

October 5, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fed98c2820ca40c228ef080ddf68e994SHA1: c61dd67fa85a6e3e1cf48512263a7097d0eac80eANALYSIS DATE: 2022-10-05T15:40:00ZTTPS: T1082, T1005, T1081, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – f7d6001c5cf2e09a7ac2682ee18739d0

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f7d6001c5cf2e09a7ac2682ee18739d0SHA1: 2b2b5bc208d0b00d72671722703a1491c43a74a0ANALYSIS DATE: 2022-10-05T16:03:42ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – smokeloader – bff503746b3152016b17bb3062ab9a8a

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: bff503746b3152016b17bb3062ab9a8aSHA1: f15e9b16d52548a03361de7320b2c42f085ae332ANALYSIS DATE: 2022-10-05T16:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – bff503746b3152016b17bb3062ab9a8a

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: bff503746b3152016b17bb3062ab9a8aSHA1: f15e9b16d52548a03361de7320b2c42f085ae332ANALYSIS DATE: 2022-10-05T16:03:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – bff503746b3152016b17bb3062ab9a8a

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: bff503746b3152016b17bb3062ab9a8aSHA1: f15e9b16d52548a03361de7320b2c42f085ae332ANALYSIS DATE: 2022-10-05T16:17:47ZTTPS:...

CISA: FBI and CISA Publish a PSA on Malicious Cyber Activity Against Election Infrastructure

October 5, 2022

FBI and CISA Publish a PSA on Malicious Cyber Activity Against Election Infrastructure The Federal Bureau of Investigation (FBI) and CISA have...

Telstra Telecom discloses data breach impacting former and current employees

October 5, 2022

Bad news for the Australian telecommunications industry, the largest company in the country Telstra suffered a data breach. Australia’s largest...

Malware Analysis – persistence – 58aea2aac89947773dfae8e3859e20b0

October 5, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 58aea2aac89947773dfae8e3859e20b0SHA1: be17c41c65703f9475e36dff55fd3de220e395f3ANALYSIS DATE: 2022-10-05T11:39:54ZTTPS: T1107, T1490, T1012, T1082, T1120, T1005, T1081, T1112,...

Malware Analysis – djvu – 18d87ffe360cfd92cb65a2992e98c482

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, pyinstaller, ransomware, spyware, stealer, trojanMD5: 18d87ffe360cfd92cb65a2992e98c482SHA1: b6047b777d250cbe8161eb5be1322168a0a9f3c9ANALYSIS DATE:...

Malware Analysis – djvu – afaea3bf154fd46c55b33c49f25cd7fa

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: afaea3bf154fd46c55b33c49f25cd7faSHA1: 472143e79672883bbe0c26e5558ae43919b4f1fcANALYSIS DATE: 2022-10-05T12:22:46ZTTPS: T1012, T1082, T1053, T1222,...

Malware Analysis – djvu – c401b79c9fc5f2c5e6ecda7d146a94ff

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c401b79c9fc5f2c5e6ecda7d146a94ffSHA1: 84667eea5e485f9155a96dcc85477cac1f7eb584ANALYSIS DATE: 2022-10-05T12:26:50ZTTPS: T1053, T1012, T1005, T1081,...

Malware Analysis – smokeloader – 18d87ffe360cfd92cb65a2992e98c482

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 18d87ffe360cfd92cb65a2992e98c482SHA1: b6047b777d250cbe8161eb5be1322168a0a9f3c9ANALYSIS DATE: 2022-10-05T12:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 6e7d0004abf6a9b3c9431da6844d231f

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6e7d0004abf6a9b3c9431da6844d231fSHA1: 9716805336d0a5e9d5d5dfd5f833624a14a098fcANALYSIS DATE: 2022-10-05T13:03:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 6e7d0004abf6a9b3c9431da6844d231f

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6e7d0004abf6a9b3c9431da6844d231fSHA1: 9716805336d0a5e9d5d5dfd5f833624a14a098fcANALYSIS DATE: 2022-10-05T13:03:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5dfcfe9e48bb38f6044bcd3e26fe7a6c

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5dfcfe9e48bb38f6044bcd3e26fe7a6cSHA1: 038f76909d23ed04ce2eb19209e537e15f5c434dANALYSIS DATE: 2022-10-05T13:05:57ZTTPS: T1082, T1005, T1081, T1012,...

threatintel

Malware Analysis – djvu – c930da72228be1f2154dd5ce35535c0e

Malware Analysis – avaddon – bc52d18853a6b575d319692ae8f90fd7

Malware Analysis – djvu – 1bb973121130046bdca6cf5366891821

Malware Analysis – smokeloader – 1bb973121130046bdca6cf5366891821

Malware Analysis – djvu – 2aa4c7dbfea83658bc01b5bcd0a58178

Malware Analysis – smokeloader – 1bb973121130046bdca6cf5366891821

Malware Analysis – – ff85205dd23b73ced624661171ef5c20

Malware Analysis – djvu – 9a2fc7060a890ac5dae857ba330775ec

Malware Analysis – djvu – ba1706454ac5e3a8541f776d4ca961b0

Malware Analysis – ransomware – fed98c2820ca40c228ef080ddf68e994

Malware Analysis – djvu – f7d6001c5cf2e09a7ac2682ee18739d0

Malware Analysis – smokeloader – bff503746b3152016b17bb3062ab9a8a

Malware Analysis – smokeloader – bff503746b3152016b17bb3062ab9a8a

Malware Analysis – djvu – bff503746b3152016b17bb3062ab9a8a

CISA: FBI and CISA Publish a PSA on Malicious Cyber Activity Against Election Infrastructure

Telstra Telecom discloses data breach impacting former and current employees

Malware Analysis – persistence – 58aea2aac89947773dfae8e3859e20b0

Malware Analysis – djvu – 18d87ffe360cfd92cb65a2992e98c482

Malware Analysis – djvu – afaea3bf154fd46c55b33c49f25cd7fa

Malware Analysis – djvu – c401b79c9fc5f2c5e6ecda7d146a94ff

Malware Analysis – smokeloader – 18d87ffe360cfd92cb65a2992e98c482

Malware Analysis – smokeloader – 6e7d0004abf6a9b3c9431da6844d231f

Malware Analysis – smokeloader – 6e7d0004abf6a9b3c9431da6844d231f

Malware Analysis – djvu – 5dfcfe9e48bb38f6044bcd3e26fe7a6c

[LYNX] – Ransomware Victim: Greta Group

[LYNX] – Ransomware Victim: Victoria Garden

[LYNX] – Ransomware Victim: Adrian Kenya

[INCRANSOM] – Ransomware Victim: Otjiwarongo Municipality

[AKIRA] – Ransomware Victim: Studioc

You may have missed