Description
Detected loader normally used to deploy BazarBackdoor malware.
General
Target
Size
Sample
images.pdf
290KB
220522-f7k1yafhh7
Score
10/10
MD5
SHA1
SHA256
SHA512
e28ae2f26a165ab891248f17b064f2e7
8ac67ed569b4675411c54ac05768eefff853854f
0b7eafb0e73e2bf0e0c6263824ffacbf4869f9121502264e5dc08d09183ae301
ba26ca25af0f1a5a5d4ec9c7fa1ba64e395d4c0a44b7803399df7dd50497addaa01ebf65d691c1f0a0a87462f0216aea60b9f4a6b3bffdc7c9743dc9e667c5b6
Malware Config
Extracted
| Family | bazarloader |
| C2 |
144.217.50.242 5.39.63.103 94.140.113.53 185.163.45.95 reddew28c.bazar bluehail.bazar whitestorm9p.bazar |
Targets
Target
MD5
Filesize
images.pdf
e28ae2f26a165ab891248f17b064f2e7
290KB
Score
10/10
SHA1
SHA256
SHA512
8ac67ed569b4675411c54ac05768eefff853854f
0b7eafb0e73e2bf0e0c6263824ffacbf4869f9121502264e5dc08d09183ae301
ba26ca25af0f1a5a5d4ec9c7fa1ba64e395d4c0a44b7803399df7dd50497addaa01ebf65d691c1f0a0a87462f0216aea60b9f4a6b3bffdc7c9743dc9e667c5b6
Tags
Signatures
-
Bazar Loader
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks
static1
Score
N/A
behavioral1
Score
10/10
behavioral2
Score
10/10