Overview

overview

10

Static

static

1

cubebrowse..._2.exe

windows10-2004-x64

10

Resubmissions

29-03-2023 05:04

230329-fqgbeseg83 10

23-03-2023 08:50

230323-kr4wbsge8w 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cubebrowsersetup_x64_2_6_2.exe

  • Size

    102.9MB

  • Sample

    230329-fqgbeseg83

  • MD5

    cb5d9790eb019a5b6470cbfee8bcc4e0

  • SHA1

    9cb33dd94ec00cce858599fb35fa3787a72ea484

  • SHA256

    bd354b3b96b0539f73b019d28c423b014942e1b450948e02633c9ebac0217c58

  • SHA512

    e9113acb2b95420e3bfb5d4f22b02e5861de40358e084cab1bcba8756bad86ad75cf5d7946732e342219f858c3f35ba2c9db4941d990154a50f05d88b12cb5c5

  • SSDEEP

    3145728:kzc1c12vU7Kg7ii2k4zcYr2ljsuHb+VBfAeIO+Pb:kzc1s2vUJ7JcT5u71eIO+Pb

Score
10/10
bazarbackdoorbackdoordiscoverypersistence

Malware Config

Targets

    • Target

      cubebrowsersetup_x64_2_6_2.exe

    • Size

      102.9MB

    • MD5

      cb5d9790eb019a5b6470cbfee8bcc4e0

    • SHA1

      9cb33dd94ec00cce858599fb35fa3787a72ea484

    • SHA256

      bd354b3b96b0539f73b019d28c423b014942e1b450948e02633c9ebac0217c58

    • SHA512

      e9113acb2b95420e3bfb5d4f22b02e5861de40358e084cab1bcba8756bad86ad75cf5d7946732e342219f858c3f35ba2c9db4941d990154a50f05d88b12cb5c5

    • SSDEEP

      3145728:kzc1c12vU7Kg7ii2k4zcYr2ljsuHb+VBfAeIO+Pb:kzc1s2vUJ7JcT5u71eIO+Pb

    Score
    10/10
    bazarbackdoorbackdoordiscoverypersistence

    • BazarBackdoor

      Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

      backdoorbazarbackdoor

    • Bazar/Team9 Backdoor payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Credential Access

Discovery

Query Registry

5
T1012

System Information Discovery

5
T1082

Peripheral Device Discovery

2
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks