Description
Detected loader normally used to deploy BazarBackdoor malware.
8320e50369b6d17c6d939347fa762213b491ffed93aa5b54d7fc5e4ad8fbf4d4
General
Target
Size
Sample
8320e50369b6d17c6d939347fa762213b491ffed93aa5b54d7fc5e4ad8fbf4d4
365KB
200910-qkcd2agbt2
Score
10 /10
MD5
SHA1
SHA256
SHA512
5f64cc672ea13388797599b40a62d9be
82523c8c89c052c7bda11b1ad0bf27affd26e906
8320e50369b6d17c6d939347fa762213b491ffed93aa5b54d7fc5e4ad8fbf4d4
3c22f98b26826024e378e0e8cf148641d0b1b1d119a97f574ce6fbcd83e4b54b685bb72be1193c1a7b860b34480e88ed1a4ff64af9cc1bafad58e1d6d4ff5cfb
Malware Config
Targets
Target
MD5
Filesize
8320e50369b6d17c6d939347fa762213b491ffed93aa5b54d7fc5e4ad8fbf4d4
5f64cc672ea13388797599b40a62d9be
365KB
Score
5 /10
SHA1
SHA256
SHA512
82523c8c89c052c7bda11b1ad0bf27affd26e906
8320e50369b6d17c6d939347fa762213b491ffed93aa5b54d7fc5e4ad8fbf4d4
3c22f98b26826024e378e0e8cf148641d0b1b1d119a97f574ce6fbcd83e4b54b685bb72be1193c1a7b860b34480e88ed1a4ff64af9cc1bafad58e1d6d4ff5cfb
Tags
Signatures
-
Bazar Loader
-
Suspicious use of SetThreadContext
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks