Analysis
- max time kernel
6s - max time network
113s - platform
windows10_x64 - resource
win10 - submitted
15/10/2020, 16:32
Static task
static1
Behavioral task
behavioral1
Sample
284.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
284.exe
Resource
win10
0 signatures
0 seconds
General
- Target 284.exe
- Size 252KB
- Sample201015-cqfqlbbfyn
- SHA256 74bced5451defff3895c5ccb299e5d72f05f64e765472ea746a4d8f6371341ff
- MD5 4a125de0e4331ad7be02c0cda051a793
- SHA1 698c1a537f52490ac3df234262855ad13c5c0fdf
- SHA512 1b075e7bdc411e4eeb98c2b273562718ebeb29c0b4cf5da037ffec0e48cd13e6db747c14d6f5489acdac61356eb80933697a660f83c6a72c14d1ffe23981090e
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- BazarBackdoor 4 IoCs
Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.
description flow ioc HTTP URL 10 https://labelcs.com/e23162ea80ec21eefb8502e6aee22143/4 HTTP URL 13 https://labelcs.com/e23162ea80ec21eefb8502e6aee22143/4 HTTP URL 14 https://labelcs.com/e23162ea80ec21eefb8502e6aee22143/2 HTTP URL 7 https://labelcs.com/e23162ea80ec21eefb8502e6aee22143/4