Overview

overview

10

Static

static

7978e198f7...95.exe

windows7_x64

10

7978e198f7...95.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7978e198f7523d487e13a742101810d765c4ed191920d571ea51c99cc18eb795

  • Size

    576KB

  • Sample

    220319-nzbrashbf7

  • MD5

    8763f3f259a7f7fb8e9e91cd3d6491c7

  • SHA1

    d56fb7bf84a483416810c4309ef720548422f6d6

  • SHA256

    7978e198f7523d487e13a742101810d765c4ed191920d571ea51c99cc18eb795

  • SHA512

    aa8ace0467c236ceacdcbd4627c518860f726d98128be2ec4cfa442cdf0f8a8f54770d34bf040450d179580743bd8f19904be187c706f295ab4d6e97a9b9c3cb

Score
10/10
bazarbackdoorbazarloaderbackdoordropperloader

Malware Config

Targets

    • Target

      7978e198f7523d487e13a742101810d765c4ed191920d571ea51c99cc18eb795

    • Size

      576KB

    • MD5

      8763f3f259a7f7fb8e9e91cd3d6491c7

    • SHA1

      d56fb7bf84a483416810c4309ef720548422f6d6

    • SHA256

      7978e198f7523d487e13a742101810d765c4ed191920d571ea51c99cc18eb795

    • SHA512

      aa8ace0467c236ceacdcbd4627c518860f726d98128be2ec4cfa442cdf0f8a8f54770d34bf040450d179580743bd8f19904be187c706f295ab4d6e97a9b9c3cb

    Score
    10/10
    bazarbackdoorbazarloaderbackdoordropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • BazarBackdoor

      Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

      backdoorbazarbackdoor

    • Bazar/Team9 Backdoor payload

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks