General

  • Target

    0x00020000000155fc-286.dll

  • Size

    341KB

  • Sample

    211021-rwvlsaadh4

  • MD5

    787d4d0708ef2412f504067f92102d80

  • SHA1

    c79de0a2ecb71ef8eb029d321da8347313a7b37f

  • SHA256

    f29dbde41d19fa55ca3cd077df6833441aca6df5f1cfccbca9ed9554214263da

  • SHA512

    0ca6da74fe9a461121e34a6942d74f21bdff501077df1dff45dcc6cf55dbea7e97172a33ef1eb8a1602ae904080369d7dcda5540ed54a8ab317d5309a01666a0

Malware Config

Targets

    • Target

      0x00020000000155fc-286.dll

    • Size

      341KB

    • MD5

      787d4d0708ef2412f504067f92102d80

    • SHA1

      c79de0a2ecb71ef8eb029d321da8347313a7b37f

    • SHA256

      f29dbde41d19fa55ca3cd077df6833441aca6df5f1cfccbca9ed9554214263da

    • SHA512

      0ca6da74fe9a461121e34a6942d74f21bdff501077df1dff45dcc6cf55dbea7e97172a33ef1eb8a1602ae904080369d7dcda5540ed54a8ab317d5309a01666a0

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • Bazar/Team9 Loader payload

MITRE ATT&CK Matrix

Tasks