Overview

overview

10

Static

static

10

a2ec27dec7...7c.exe

windows7_x64

10

a2ec27dec7...7c.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2ec27dec7addbe9aa3ce2551fd5ccda03d19af869133217fe0ef0dd0f2d6c7c

  • Size

    229KB

  • Sample

    220220-ecttxsgdb8

  • MD5

    d55ec134a3046f289d9ebfdba1e98775

  • SHA1

    530f3a7f892b949d4025418ba35d881ab4a364d4

  • SHA256

    a2ec27dec7addbe9aa3ce2551fd5ccda03d19af869133217fe0ef0dd0f2d6c7c

  • SHA512

    d1d58bb8b247db9161f3178165fad5e96944bf4cabef0139a7d86ab43747a69f76620f423644934d5096209e6c11f62d04daef16b37c55d2dd32b654f99336f5

Score
10/10
bazarbackdoorbackdoor

Malware Config

Targets

    • Target

      a2ec27dec7addbe9aa3ce2551fd5ccda03d19af869133217fe0ef0dd0f2d6c7c

    • Size

      229KB

    • MD5

      d55ec134a3046f289d9ebfdba1e98775

    • SHA1

      530f3a7f892b949d4025418ba35d881ab4a364d4

    • SHA256

      a2ec27dec7addbe9aa3ce2551fd5ccda03d19af869133217fe0ef0dd0f2d6c7c

    • SHA512

      d1d58bb8b247db9161f3178165fad5e96944bf4cabef0139a7d86ab43747a69f76620f423644934d5096209e6c11f62d04daef16b37c55d2dd32b654f99336f5

    Score
    10/10
    bazarbackdoorbackdoor

    • BazarBackdoor

      Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

      backdoorbazarbackdoor

    • Tries to connect to .bazar domain

      Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks