Overview

overview

10

Static

static

864cf756fa...d9.exe

windows7_x64

10

864cf756fa...d9.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    864cf756fae7a3396d1028e9d8c2077df32ec207a0bf3222fcec6027a4a71fd9

  • Size

    506KB

  • Sample

    220319-yfna4ahacl

  • MD5

    532524ec1e7a51b51f948fdc79bd0f83

  • SHA1

    ce1b6a7f420e277ff4f371b37f7ce9abc78c2929

  • SHA256

    864cf756fae7a3396d1028e9d8c2077df32ec207a0bf3222fcec6027a4a71fd9

  • SHA512

    d594d9866ff30428d958d4a54b10938f41c030f3ac6ecfd5a67155b82ee6913275f8ed6f3ee7c446c5d59a2fd04251b28e61b283cafbde71a1a61e01c09db33c

Score
10/10
bazarloaderdropperloader

Malware Config

Targets

    • Target

      864cf756fae7a3396d1028e9d8c2077df32ec207a0bf3222fcec6027a4a71fd9

    • Size

      506KB

    • MD5

      532524ec1e7a51b51f948fdc79bd0f83

    • SHA1

      ce1b6a7f420e277ff4f371b37f7ce9abc78c2929

    • SHA256

      864cf756fae7a3396d1028e9d8c2077df32ec207a0bf3222fcec6027a4a71fd9

    • SHA512

      d594d9866ff30428d958d4a54b10938f41c030f3ac6ecfd5a67155b82ee6913275f8ed6f3ee7c446c5d59a2fd04251b28e61b283cafbde71a1a61e01c09db33c

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks