bazarbackdoor | d7d8683f4534ce4888d12821ce5034b73de42cc5c00f088231d9825809307ea8 | Triage

Analysis

max time kernel
146s
max time network
147s
platform
windows7_x64
resource
win7
submitted
26-10-2020 20:40

Sharing

Report Analysis Logs

General

Target

sts.exe
Size

691KB
MD5

465fb3d24617ccd418f0c2ef51b3e783
SHA1

f3c32d21906217912a1efc1f905cccc02d8ce30f
SHA256

d7d8683f4534ce4888d12821ce5034b73de42cc5c00f088231d9825809307ea8
SHA512

ce909cae3b96372120e333b855d113e6adeefcebad68df5dd109e82916009d0185991b6d5184b5fc7a5f8bcb87d138edb4c7cec5ec7ff2617672bb5627d1168d

Score

10^/10

backdoor bazarbackdoor

Malware Config

Signatures

BazarBackdoor 2 IoCs
Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.
backdoor bazarbackdoor

Processes:

description flow ioc

HTTP URL 6 https://lmnab.xyz/0b21d65b7a868a60459cf6e50e7c9547/2
HTTP URL 7 https://lmnab.xyz/0b21d65b7a868a60459cf6e50e7c9547/4

C:\Users\Admin\AppData\Local\Temp\sts.exe
"C:\Users\Admin\AppData\Local\Temp\sts.exe"
1⤵
PID:1524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...