Overview

overview

10

Static

static

10

aa62b03648...96.exe

windows7_x64

1

aa62b03648...96.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa62b0364845d691dadcb23ba7427dccbc1ac62eb95ee75b8c88ad444a319496

  • Size

    135KB

  • Sample

    201106-rm4c2f4aga

  • MD5

    3f5ccff034674bfc15424718d1b4c28f

  • SHA1

    f57b861dc3c9942344964cc4f177771c2a415877

  • SHA256

    aa62b0364845d691dadcb23ba7427dccbc1ac62eb95ee75b8c88ad444a319496

  • SHA512

    b1d324f8a9e60d3c3eb52ad251c7d5c80409f9610eef71a8a0c21e5eb8d4c8ad0b30f89444cc5448444dec477cb3232bf507795fb66181bf313cd622bc7d3693

Score
10/10
bazarbackdoorbazarloaderbackdoor

Malware Config

Targets

    • Target

      aa62b0364845d691dadcb23ba7427dccbc1ac62eb95ee75b8c88ad444a319496

    • Size

      135KB

    • MD5

      3f5ccff034674bfc15424718d1b4c28f

    • SHA1

      f57b861dc3c9942344964cc4f177771c2a415877

    • SHA256

      aa62b0364845d691dadcb23ba7427dccbc1ac62eb95ee75b8c88ad444a319496

    • SHA512

      b1d324f8a9e60d3c3eb52ad251c7d5c80409f9610eef71a8a0c21e5eb8d4c8ad0b30f89444cc5448444dec477cb3232bf507795fb66181bf313cd622bc7d3693

    Score
    10/10
    bazarbackdoorbackdoor

    • BazarBackdoor

      Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

      backdoorbazarbackdoor

    • Tries to connect to .bazar domain

      Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks