General

  • Target
    56d8a969497fe0cf90aa6e71c8f7c1a2e76b621d0b18876db8e3ca198a7b4350
  • Size 549KB
  • Sample220128-lbhtlaadhp
  • SHA256 2ecfc8a844105c2ccc181ddc4f8b66ea715071dc16e8fb18402085c132725a96
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      56d8a969497fe0cf90aa6e71c8f7c1a2e76b621d0b18876db8e3ca198a7b4350
    • Size 1.7MB
    • SHA256 56d8a969497fe0cf90aa6e71c8f7c1a2e76b621d0b18876db8e3ca198a7b4350
    • MD5 SHA1 SHA512
    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Bazar/Team9 Loader payload

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks