Resubmissions

22-10-2021 08:03

211022-jxpsxsbcg8 10

21-10-2021 18:03

211021-wm22qabebn 10

General

  • Target

    c18acf443a95d2f705fa3c8e0477622d.dll

  • Size

    341KB

  • Sample

    211021-wm22qabebn

  • MD5

    c18acf443a95d2f705fa3c8e0477622d

  • SHA1

    f2077a96a8015f19fa21ca27b8203aa999aac2d5

  • SHA256

    4a3dc99f99af4f2d8bd707a4163886df47cbdf6934856c416785010334412043

  • SHA512

    22471dfc4b42cad9a0099a8e0ed17b45f23ab387c0d5bf9fe3786cfabea1e17ce3ecf9638d7027af311cbbe218ad72da2d24f8d9e742030d21875738aeb09c5f

Malware Config

Targets

    • Target

      c18acf443a95d2f705fa3c8e0477622d.dll

    • Size

      341KB

    • MD5

      c18acf443a95d2f705fa3c8e0477622d

    • SHA1

      f2077a96a8015f19fa21ca27b8203aa999aac2d5

    • SHA256

      4a3dc99f99af4f2d8bd707a4163886df47cbdf6934856c416785010334412043

    • SHA512

      22471dfc4b42cad9a0099a8e0ed17b45f23ab387c0d5bf9fe3786cfabea1e17ce3ecf9638d7027af311cbbe218ad72da2d24f8d9e742030d21875738aeb09c5f

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • suricata: ET MALWARE BazaLoader Activity (GET)

      suricata: ET MALWARE BazaLoader Activity (GET)

    • Bazar/Team9 Loader payload

MITRE ATT&CK Matrix

Tasks