Resubmissions

26/08/2021, 14:30

210826-zgj6rs78an10

19/07/2021, 06:28

210719-9gpfxlye2x10

General

  • Target
    ea3612919bf05b66e9a608bee742a422.dll
  • Size 153KB
  • Sample210719-9gpfxlye2x
  • SHA256 fd001fb71e9faa68c6e53162ed0554fd6f16a0e381aa280cea397b3d74bb62eb
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      ea3612919bf05b66e9a608bee742a422.dll
    • Size 153KB
    • SHA256 fd001fb71e9faa68c6e53162ed0554fd6f16a0e381aa280cea397b3d74bb62eb
    • MD5 SHA1 SHA512
    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • BazarBackdoor

      Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

    • Bazar/Team9 Backdoor payload

    • Bazar/Team9 Loader payload

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks