General
-
Target
vegas.dll
-
Size
513KB
-
Sample
210506-qsszzqrbca
-
MD5
b80f4b91c29963df1cfd0d0a8a30e5c6
-
SHA1
09c6ae06e0c10672d91f6850118f41dc3dd66e72
-
SHA256
0a87bd3bb60320b21e493341b70519af4e46c2e969038d6d89b536cd37aa11d9
-
SHA512
bdcd3009ed3499055cf73ef1c4dd4bd0942c8b81c395cecf3c9da790e4867055059d10b05451476d7da98bbbf472c40536e7a09158b5de92c57a74e36396d10c
Static task
static1
Behavioral task
behavioral1
Sample
vegas.dll
Resource
win7v20210408
Behavioral task
behavioral2
Sample
vegas.dll
Resource
win10v20210410
Malware Config
Targets
-
-
Target
vegas.dll
-
Size
513KB
-
MD5
b80f4b91c29963df1cfd0d0a8a30e5c6
-
SHA1
09c6ae06e0c10672d91f6850118f41dc3dd66e72
-
SHA256
0a87bd3bb60320b21e493341b70519af4e46c2e969038d6d89b536cd37aa11d9
-
SHA512
bdcd3009ed3499055cf73ef1c4dd4bd0942c8b81c395cecf3c9da790e4867055059d10b05451476d7da98bbbf472c40536e7a09158b5de92c57a74e36396d10c
Score10/10-
BazarBackdoor
Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.
-
Blocklisted process makes network request
-
Suspicious use of SetThreadContext
-