General

  • Target

    c74e0f2c865a453ba9adae0b2b2e041f9edbcd5b8ea8265aa53e7059a5d23010

  • Size

    460KB

  • Sample

    220411-bhcaaaeggq

  • MD5

    4ee82dfeaeb990ed10a537b59c8a5a53

  • SHA1

    3dcfa04c24742353be3a9d4fcc623a3631080f47

  • SHA256

    b0692f988c5c20f64e6a91a8292fb157f1851281da90aebce394fa2b314da4c8

  • SHA512

    e74d5163d8a6612fd13ca820a9173ceacba2d4ab188fa02365a26df387b26ac313ad7446033c2fd1efb36dff8108f9c3fff583503460ba184726118f06b595b1

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      c74e0f2c865a453ba9adae0b2b2e041f9edbcd5b8ea8265aa53e7059a5d23010

    • Size

      711KB

    • MD5

      b1d2cc8ebd251d01be918334b5f58a20

    • SHA1

      c424f8d3a50168286a7534412306606cc09c6a9f

    • SHA256

      c74e0f2c865a453ba9adae0b2b2e041f9edbcd5b8ea8265aa53e7059a5d23010

    • SHA512

      86b09aad5b33e809df8314d404dff97cd1b30967b25192f8e97e4b0e96712f44a74d8e4a226f4f4bb57af78f85052b59aec17c5cfb8c912b86a22fe0893afd4a

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • Bazar/Team9 Loader payload

MITRE ATT&CK Matrix

Tasks