Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
13-11-2020 15:35
Static task
static1
Behavioral task
behavioral1
Sample
b8b4ded6456fcfd6a34903cbd6a0b152edce57e4d1a68b0f56c54670fd165312.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
b8b4ded6456fcfd6a34903cbd6a0b152edce57e4d1a68b0f56c54670fd165312.exe
Resource
win10v20201028
General
-
Target
b8b4ded6456fcfd6a34903cbd6a0b152edce57e4d1a68b0f56c54670fd165312.exe
-
Size
214KB
-
MD5
64a5c01a057b329d950514a1121e52d9
-
SHA1
2e3bdc380a0af38c865095c7e6731da359d9bee2
-
SHA256
b8b4ded6456fcfd6a34903cbd6a0b152edce57e4d1a68b0f56c54670fd165312
-
SHA512
09e55b11330f668c159dc93282c303feb15e4641e7dcc8a9f8b127028f2e7e15a0276422d940f61c5e3fb1a5f6e95b12f5e49dba5bb04786f25c5521e3afd6c3
Malware Config
Signatures
-
BazarBackdoor 3 IoCs
Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.
Processes:
description flow ioc HTTP URL 5 https://194.87.145.86/4845483730a107c41245538b980f8039/2 HTTP URL 6 https://194.87.145.86/4845483730a107c41245538b980f8039/2 HTTP URL 7 https://194.87.145.86/4845483730a107c41245538b980f8039/2