General

  • Target

    56c5bee33c17a453c900725f88efb0466fd928072c420955fa599b518b9dfcd2

  • Size

    573KB

  • Sample

    220319-3sk4qacdf6

  • MD5

    ee85e8c0956d2021732d9606120401f9

  • SHA1

    23199f07804d05a120e43b1930c910b1961d1ce6

  • SHA256

    56c5bee33c17a453c900725f88efb0466fd928072c420955fa599b518b9dfcd2

  • SHA512

    321d4d43ce87c6ac7612698190f664d7c96018884d2e1b5a30710c9106afbe4ea2d9720ad4eb80941a752c397945e67062d5f218019ef4f1b329bd2bea6275cc

Malware Config

Targets

    • Target

      56c5bee33c17a453c900725f88efb0466fd928072c420955fa599b518b9dfcd2

    • Size

      573KB

    • MD5

      ee85e8c0956d2021732d9606120401f9

    • SHA1

      23199f07804d05a120e43b1930c910b1961d1ce6

    • SHA256

      56c5bee33c17a453c900725f88efb0466fd928072c420955fa599b518b9dfcd2

    • SHA512

      321d4d43ce87c6ac7612698190f664d7c96018884d2e1b5a30710c9106afbe4ea2d9720ad4eb80941a752c397945e67062d5f218019ef4f1b329bd2bea6275cc

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • BazarBackdoor

      Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

    • Bazar/Team9 Backdoor payload

    • Bazar/Team9 Loader payload

MITRE ATT&CK Matrix

Tasks