Overview

overview

10

Static

static

10

4c0b10f54e...19.exe

windows7_x64

10

4c0b10f54e...19.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    150s
  • max time network
    157s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    02-05-2022 11:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4c0b10f54e62d48405351342ebf4a11ae449ac6377d091827d5a177c0e0f9719.exe

  • Size

    116KB

  • MD5

    7de28d47c6f1dbe38f892253ff530208

  • SHA1

    019cd9232cb9df9109142f78fa5a7eaf91e5c549

  • SHA256

    4c0b10f54e62d48405351342ebf4a11ae449ac6377d091827d5a177c0e0f9719

  • SHA512

    5da4e8e9e3e101291551b6c0570ce14b7c7be37a4b87a897dc11d0ed250b12df78fec4aed86c0203a9f35c0acba9b72e5d81eea01565c4287dbd3265b4f31c42

Score
10/10
bazarbackdoorbackdoor

Malware Config

Signatures

  • BazarBackdoor 1 IoCs

    Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

    backdoorbazarbackdoor
  • Unexpected DNS network traffic destination 58 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

  • C:\Users\Admin\AppData\Local\Temp\4c0b10f54e62d48405351342ebf4a11ae449ac6377d091827d5a177c0e0f9719.exe
    "C:\Users\Admin\AppData\Local\Temp\4c0b10f54e62d48405351342ebf4a11ae449ac6377d091827d5a177c0e0f9719.exe"
    1⤵
      PID:860

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads