Overview

overview

10

Static

static

vnFOkDuT.dat.dll

windows7_x64

10

vnFOkDuT.dat.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    vnFOkDuT.dat

  • Size

    329KB

  • Sample

    211021-3bn42sbggp

  • MD5

    2360003b5481a62ef257e96a12f2207c

  • SHA1

    c077769cf7ef2d553446c4fa624d106d1ee4d51c

  • SHA256

    718636d4bd0d0000d1204107de65d9d62ad691e1cd2473bf2b8be57136679157

  • SHA512

    846a7df71a73033011b6cfdf8f844feb6fe242875fc34803951b834b92844b4a1a7733b6e6a6e6919100084affe387c1c27c8b8917b7ecfa8ac6a3b9eb57b108

Score
10/10
bazarloaderdropperloadersuricata

Malware Config

Targets

    • Target

      vnFOkDuT.dat

    • Size

      329KB

    • MD5

      2360003b5481a62ef257e96a12f2207c

    • SHA1

      c077769cf7ef2d553446c4fa624d106d1ee4d51c

    • SHA256

      718636d4bd0d0000d1204107de65d9d62ad691e1cd2473bf2b8be57136679157

    • SHA512

      846a7df71a73033011b6cfdf8f844feb6fe242875fc34803951b834b92844b4a1a7733b6e6a6e6919100084affe387c1c27c8b8917b7ecfa8ac6a3b9eb57b108

    Score
    10/10
    bazarloaderdropperloadersuricata

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • suricata: ET MALWARE BazaLoader Activity (GET)

      suricata: ET MALWARE BazaLoader Activity (GET)

      suricata

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks