Overview

overview

10

Static

static

data.jpg.dll

windows7_x64

10

data.jpg.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    data.jpg

  • Size

    329KB

  • Sample

    211022-ds8gksbhgq

  • MD5

    8658eccd9a4d6d6f1f697d1a48a8469d

  • SHA1

    5c7890250b5eb005f80a60912b0c0b1ecbed2a3b

  • SHA256

    e2b9c085470b3b82da4993a4f44981d126058c3466eb8ffcaac2d3cfcaea7da6

  • SHA512

    fe90246718f7279c6f7dd93c5dfcfba3afa66b4217de272830e115309a6dc1a7816a334bbe7ac16d880b995205337e0a9faff71fa8725433d45f8ace8c351ceb

Score
10/10
bazarloaderdropperloadersuricata

Malware Config

Targets

    • Target

      data.jpg

    • Size

      329KB

    • MD5

      8658eccd9a4d6d6f1f697d1a48a8469d

    • SHA1

      5c7890250b5eb005f80a60912b0c0b1ecbed2a3b

    • SHA256

      e2b9c085470b3b82da4993a4f44981d126058c3466eb8ffcaac2d3cfcaea7da6

    • SHA512

      fe90246718f7279c6f7dd93c5dfcfba3afa66b4217de272830e115309a6dc1a7816a334bbe7ac16d880b995205337e0a9faff71fa8725433d45f8ace8c351ceb

    Score
    10/10
    bazarloaderdropperloadersuricata

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • suricata: ET MALWARE BazaLoader Activity (GET)

      suricata: ET MALWARE BazaLoader Activity (GET)

      suricata

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks