General

  • Target
    e63bbea6b4610fda6d0d54a9ed4b49bc
  • Size 1.7MB
  • Sample220127-rezt6sedf3
  • SHA256 08bf0258a2a82e0ad674a14bcbbac2d84a61cbcb4b172d795ec128eb79831adb
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      e63bbea6b4610fda6d0d54a9ed4b49bc
    • Size 1.7MB
    • SHA256 08bf0258a2a82e0ad674a14bcbbac2d84a61cbcb4b172d795ec128eb79831adb
    • MD5 SHA1 SHA512
    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Bazar/Team9 Loader payload

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks