Overview

overview

10

Static

static

13dbe66c35...6f.exe

windows7_x64

10

13dbe66c35...6f.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13dbe66c35c7d09b65668826797ace714aaffd59a7c650cd14564991a7c57e6f

  • Size

    720KB

  • Sample

    220220-l2vk3sbca7

  • MD5

    cd6b9af8db078afe074b12a4fd0a5869

  • SHA1

    b747823681fa365a7e4a897db1862b007950cd26

  • SHA256

    13dbe66c35c7d09b65668826797ace714aaffd59a7c650cd14564991a7c57e6f

  • SHA512

    68a1ca174dfacb9f0faf7ce9c6eb27dd9acd18165954440c8b60e1dbe6e67297ebf7bbe73c39fded8e314ddcd550d6a5d3a739fd7669c682207137f535c19744

Score
10/10
bazarbackdoorbackdoor

Malware Config

Targets

    • Target

      13dbe66c35c7d09b65668826797ace714aaffd59a7c650cd14564991a7c57e6f

    • Size

      720KB

    • MD5

      cd6b9af8db078afe074b12a4fd0a5869

    • SHA1

      b747823681fa365a7e4a897db1862b007950cd26

    • SHA256

      13dbe66c35c7d09b65668826797ace714aaffd59a7c650cd14564991a7c57e6f

    • SHA512

      68a1ca174dfacb9f0faf7ce9c6eb27dd9acd18165954440c8b60e1dbe6e67297ebf7bbe73c39fded8e314ddcd550d6a5d3a739fd7669c682207137f535c19744

    Score
    10/10
    bazarbackdoorbackdoor

    • BazarBackdoor

      Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

      backdoorbazarbackdoor

    • Tries to connect to .bazar domain

      Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks