General

  • Target
    59136a8738af5783756405f46526e99f705dd94a14dd2629de96880814dacc0c
  • Size 549KB
  • Sample220122-satb9sbfh8
  • SHA256 e037ac8d0cf0abd94a7cd4e4c5c132ef5d398bee90bf71d47692c3804285eee1
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      59136a8738af5783756405f46526e99f705dd94a14dd2629de96880814dacc0c
    • Size 1.7MB
    • SHA256 59136a8738af5783756405f46526e99f705dd94a14dd2629de96880814dacc0c
    • MD5 SHA1 SHA512
    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Bazar/Team9 Loader payload

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks