Overview

overview

10

Static

static

4324e519c3...55.exe

windows7_x64

10

4324e519c3...55.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4324e519c3af337501924823d25274db909e16cc3805de838157737f948ec255

  • Size

    153KB

  • Sample

    220510-wdqmbsdgg6

  • MD5

    07312275b8a97fc8a4d6024f889f40aa

  • SHA1

    242df9bf507f11468fe9d40994a6bf34b472817a

  • SHA256

    4324e519c3af337501924823d25274db909e16cc3805de838157737f948ec255

  • SHA512

    1bbdd9bc4072468cb11f218e8e2cbef2ae4d64fa75cbca08d5512482e1faecbf4a2c48f1a5dbbb88afc5a99bedcf72bcab1f0f7d64117594757ad6ad52edb80b

Score
10/10
bazarloaderdropperloader

Malware Config

Targets

    • Target

      4324e519c3af337501924823d25274db909e16cc3805de838157737f948ec255

    • Size

      153KB

    • MD5

      07312275b8a97fc8a4d6024f889f40aa

    • SHA1

      242df9bf507f11468fe9d40994a6bf34b472817a

    • SHA256

      4324e519c3af337501924823d25274db909e16cc3805de838157737f948ec255

    • SHA512

      1bbdd9bc4072468cb11f218e8e2cbef2ae4d64fa75cbca08d5512482e1faecbf4a2c48f1a5dbbb88afc5a99bedcf72bcab1f0f7d64117594757ad6ad52edb80b

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Tries to connect to .bazar domain

      Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks