General

  • Target

    vegas.dll

  • Size

    513KB

  • Sample

    210506-qsszzqrbca

  • MD5

    b80f4b91c29963df1cfd0d0a8a30e5c6

  • SHA1

    09c6ae06e0c10672d91f6850118f41dc3dd66e72

  • SHA256

    0a87bd3bb60320b21e493341b70519af4e46c2e969038d6d89b536cd37aa11d9

  • SHA512

    bdcd3009ed3499055cf73ef1c4dd4bd0942c8b81c395cecf3c9da790e4867055059d10b05451476d7da98bbbf472c40536e7a09158b5de92c57a74e36396d10c

Score
10/10

Malware Config

Targets

    • Target

      vegas.dll

    • Size

      513KB

    • MD5

      b80f4b91c29963df1cfd0d0a8a30e5c6

    • SHA1

      09c6ae06e0c10672d91f6850118f41dc3dd66e72

    • SHA256

      0a87bd3bb60320b21e493341b70519af4e46c2e969038d6d89b536cd37aa11d9

    • SHA512

      bdcd3009ed3499055cf73ef1c4dd4bd0942c8b81c395cecf3c9da790e4867055059d10b05451476d7da98bbbf472c40536e7a09158b5de92c57a74e36396d10c

    Score
    10/10
    • BazarBackdoor

      Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks