Overview

overview

10

Static

static

10

5487e8a128...1c.exe

windows7_x64

10

5487e8a128...1c.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5487e8a1288e673b8bfe79485e34c1607a476727bb5ff68282a814cb738c531c

  • Size

    121KB

  • Sample

    220510-xv35esafcq

  • MD5

    e24a1137cd0a33167758895967a0b03c

  • SHA1

    ccff2c4fa1ee69c0c8187e809ec1fda6927be7aa

  • SHA256

    5487e8a1288e673b8bfe79485e34c1607a476727bb5ff68282a814cb738c531c

  • SHA512

    b8b68fdfa75d8662f16447ed247e4e1da0d6e6e8e9639a4c264681262e6e305f8292a9365f8a4fe2f6ab565a71c1bcc4426429231a2af1f84e83b9a42e8600d6

Score
10/10
bazarbackdoorbazarloaderbackdoor

Malware Config

Targets

    • Target

      5487e8a1288e673b8bfe79485e34c1607a476727bb5ff68282a814cb738c531c

    • Size

      121KB

    • MD5

      e24a1137cd0a33167758895967a0b03c

    • SHA1

      ccff2c4fa1ee69c0c8187e809ec1fda6927be7aa

    • SHA256

      5487e8a1288e673b8bfe79485e34c1607a476727bb5ff68282a814cb738c531c

    • SHA512

      b8b68fdfa75d8662f16447ed247e4e1da0d6e6e8e9639a4c264681262e6e305f8292a9365f8a4fe2f6ab565a71c1bcc4426429231a2af1f84e83b9a42e8600d6

    Score
    10/10
    bazarbackdoorbackdoor

    • BazarBackdoor

      Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

      backdoorbazarbackdoor
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks