Extracted

• • Target

    Stolen Images Evidence.js

  • Size

    18KB

  • MD5

    90efa8d6677a45ea3397ab8c2bb5bfcd

  • SHA1

    451c972435ed6e4a3abe1d390ff52691d84d20fa

  • SHA256

    7e014f3533333cbbae1dcd3505a25990d07e7f4a3684fb8b35f744d02215b20a

  • SHA512

    809b4dcb00b016b537279fadec1ace549b6848dcb37a20d0548b7036a2e103e5b4eb7b0f45749fd50a3bae17310ca797362181150fed5be2169f2cb6ac6f9c9a

  Score

  10^/10

  bazarbackdoorbazarloaderbackdoordropperloader

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader

  • BazarBackdoor

    Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

    backdoorbazarbackdoor

  • Bazar/Team9 Backdoor payload

  • Bazar/Team9 Loader payload

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2