Overview

overview

10

Static

static

cdc37d85b3...70.exe

windows7_x64

10

cdc37d85b3...70.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cdc37d85b3ea9525d8a24634a379169cbb87365a90d12d7043df80240d6bef70

  • Size

    156KB

  • Sample

    220510-wdnsqsgeam

  • MD5

    2c878fc287b2951f9fad69463c8e51fe

  • SHA1

    328ce7444054a8175e7a9d3b52d8b699b7ce4e7b

  • SHA256

    cdc37d85b3ea9525d8a24634a379169cbb87365a90d12d7043df80240d6bef70

  • SHA512

    660100a39bb97aa5c40bdb33a910a57b38607d5eb641c546873037a2821e0ebf851a47eab4d119d511f3661e3edd8ae7395bf896b72c76d1f441913f972ccd0e

Score
10/10
bazarloaderdropperloader

Malware Config

Targets

    • Target

      cdc37d85b3ea9525d8a24634a379169cbb87365a90d12d7043df80240d6bef70

    • Size

      156KB

    • MD5

      2c878fc287b2951f9fad69463c8e51fe

    • SHA1

      328ce7444054a8175e7a9d3b52d8b699b7ce4e7b

    • SHA256

      cdc37d85b3ea9525d8a24634a379169cbb87365a90d12d7043df80240d6bef70

    • SHA512

      660100a39bb97aa5c40bdb33a910a57b38607d5eb641c546873037a2821e0ebf851a47eab4d119d511f3661e3edd8ae7395bf896b72c76d1f441913f972ccd0e

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Tries to connect to .bazar domain

      Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks