Posts

Malware Analysis 5: Sepsis Ransomware
Basic Information Name: Sepsis Ransomware SHA256: 3c7d9ecd35b21a2a8fac7cce4fdb3e11c1950d5a02a0c0b369f4082acf00bf9a SHA-1 518d5a0a8025147b9e29821bccdaf3b42c0d01db MD5 1221ac9d607af73c65fd6c62bec3d249 File Type Win32 EXE Detection: According to the analysis report by Virus Total the detection rate of the sample is 57/70.
Nov 10, 2019 7 min read
Malware Analysis 5: Sepsis Ransomware
Malware Analysis4: APT_MalDoc_SharpShooter_Lazarus
Basic Information: Name: PT_MalDoc_SharpShooter_Lazarus sha256: dd38e5378f0de8489c9d015758d8ad390ecdf9599b8a4b90b218f6de6d1c1e16 FileType: Composite Document File FileExtension: Microsoft Office File Introduction: The sample is a Composite Document, having Colgate class action lawsuit as the subject. Compound Document file is also known as Compound File Binary Format.
Aug 19, 2019 4 min read
Malware Analysis4: APT_MalDoc_SharpShooter_Lazarus
Malware Analysis 3: Mydoom
Basic Information Name: Mydoom SHA256: fff0ccf5feaf5d46b295f770ad398b6d572909b00e2b8bcd1b1c286c70cd9151 SHA-1 f91a4d7ac276b8e8b7ae41c22587c89a39ddcea5 MD5 53df39092394741514bc050f3d6a06a9 File Type Win32 EXE The malware sample is a PE32 bit executable packed using UPX packer. We found out that the executable is packed using UPX packer (version ranging from 0.
Aug 1, 2019 5 min read
Malware Analysis 3: Mydoom
Malware Analysis 2: Mirage Fox
History: The APT15 (Aka Mirage, Royal APT, Playful Dragon .. ) group has been active since at least 2010, They conducted cyber espionage campaigns against targets in defense, high tech, energy, government, aerospace, manufacturing industries worldwide.
Jul 26, 2019 3 min read
Malware Analysis 2: Mirage Fox
Malware Analysis 1: Jigsaw Ransomware
Basic Properties: Name: Jigsaw Ransomware SHA256: 3ae96f73d805e1d3995253db4d910300d8442ea603737a1428b613061e7f61e7 SHA-1 27d99fbca067f478bb91cdbcb92f13a828b00859 MD5 2773e3dc59472296cb0024ba7715a64e File Type 64Bit .Net EXE After performing initial static analysis we found out that the sample is a 64bit PE .
Jul 19, 2019 6 min read
Malware Analysis 1: Jigsaw Ransomware