bazarbackdoor | 0c2507c55424c7a6e41f6ebe08e90853a17f7548723d556d49b8aa32719a00bf | Triage

Analysis

max time kernel
159s
max time network
173s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
12-05-2022 00:10

Sharing

Report Analysis Logs

General

Target

0c2507c55424c7a6e41f6ebe08e90853a17f7548723d556d49b8aa32719a00bf.exe
Size

121KB
MD5

5817bd784535ef8ad2359886737e1773
SHA1

c148e9fde75347ed7d010ce76abce351e587004d
SHA256

0c2507c55424c7a6e41f6ebe08e90853a17f7548723d556d49b8aa32719a00bf
SHA512

532e5228ab8b19e2d503e88fec747c77f15a0f5544867a6dc6914696b2eae6aa3d73aea4f349e1e4cc7b7bf25d64ee5cfb9220423420bb2ae19c942f615fb837

Score

10^/10

bazarbackdoor backdoor

Malware Config

Signatures

BazarBackdoor 1 IoCs
Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.
backdoor bazarbackdoor

Processes:

description flow ioc

HTTP URL 63 https://194.5.249.136/0048545447381201342410445268633692493139/2

C:\Users\Admin\AppData\Local\Temp\0c2507c55424c7a6e41f6ebe08e90853a17f7548723d556d49b8aa32719a00bf.exe
"C:\Users\Admin\AppData\Local\Temp\0c2507c55424c7a6e41f6ebe08e90853a17f7548723d556d49b8aa32719a00bf.exe"
1⤵
PID:1800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...