General

  • Target

    3c76843066579026653d191b3c1b363597d4a443bf011efeb9376fe90dcb0411

  • Size

    459KB

  • Sample

    220411-ehvneahcgk

  • MD5

    a1bc9c653245877a51ad747a97b96c06

  • SHA1

    a28349e4babb0d50f43e202ddb170f7ceabba626

  • SHA256

    ee73db6f807e3796f2b995e00462faefc249f76eb135b563a5944ba8681ad161

  • SHA512

    383c3f00893d0d14172d5c04fe11ce12a1f00a1b3e4c37427e354cea0f612658ffa694a80d741ffb42ca287423eee849f24ff9182ecccb6d55acdc478275c175

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      3c76843066579026653d191b3c1b363597d4a443bf011efeb9376fe90dcb0411

    • Size

      710KB

    • MD5

      3f0243ef967df35f16d52b5381d37ee6

    • SHA1

      160309b2e1711e26a86a3a7cfee04bf0711bbc8f

    • SHA256

      3c76843066579026653d191b3c1b363597d4a443bf011efeb9376fe90dcb0411

    • SHA512

      a60f71e14fc718afe5fa36d0cc1d80fab6638a1bb27d8a6ec42aea769de48e70b58b19e509011ba544c8a551ff4c9313513715bf706b321f3d8f7e9663babe6f

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • Bazar/Team9 Loader payload

MITRE ATT&CK Matrix

Tasks