Description
Detected loader normally used to deploy BazarBackdoor malware.
9368b2e452b648df6375818ef333bef1810b36e83db0a950515dcbb7ab34ff33
156KB
220510-wdp1ssdgg5
76b0f0d39f02744dd1937fe7688807d8
64cfa7352be82723e11282099975635f33fe7eb5
9368b2e452b648df6375818ef333bef1810b36e83db0a950515dcbb7ab34ff33
b2eca7e0282f91180ab5f351e8e7eb74bea787976cadfd7e41b5b88147addef9d15cadd1a03070fa83cb18af05e17cc695d7ed3a193c665b217bd91077d04503
9368b2e452b648df6375818ef333bef1810b36e83db0a950515dcbb7ab34ff33
76b0f0d39f02744dd1937fe7688807d8
156KB
64cfa7352be82723e11282099975635f33fe7eb5
9368b2e452b648df6375818ef333bef1810b36e83db0a950515dcbb7ab34ff33
b2eca7e0282f91180ab5f351e8e7eb74bea787976cadfd7e41b5b88147addef9d15cadd1a03070fa83cb18af05e17cc695d7ed3a193c665b217bd91077d04503
Detected loader normally used to deploy BazarBackdoor malware.
Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.