Analysis
-
max time kernel
171s -
max time network
195s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
20-02-2022 03:48
General
-
Target
a2ec27dec7addbe9aa3ce2551fd5ccda03d19af869133217fe0ef0dd0f2d6c7c.exe
-
Size
229KB
-
MD5
d55ec134a3046f289d9ebfdba1e98775
-
SHA1
530f3a7f892b949d4025418ba35d881ab4a364d4
-
SHA256
a2ec27dec7addbe9aa3ce2551fd5ccda03d19af869133217fe0ef0dd0f2d6c7c
-
SHA512
d1d58bb8b247db9161f3178165fad5e96944bf4cabef0139a7d86ab43747a69f76620f423644934d5096209e6c11f62d04daef16b37c55d2dd32b654f99336f5
Score
10/10
Malware Config
Signatures
-
BazarBackdoor 2 IoCs
Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.
-
Tries to connect to .bazar domain 60 IoCs
Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a2ec27dec7addbe9aa3ce2551fd5ccda03d19af869133217fe0ef0dd0f2d6c7c.exe"C:\Users\Admin\AppData\Local\Temp\a2ec27dec7addbe9aa3ce2551fd5ccda03d19af869133217fe0ef0dd0f2d6c7c.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
8KB