Behavioral task
behavioral1
Sample
27051a.msi
Resource
win10v2004-20230220-en
windows10-2004-x64
23 signatures
150 seconds
General
-
Target
MDE_File_Sample_fe0cba1d9dd7a779a9c9c905cd27f00edcc0115e.zip
-
Size
94.2MB
-
MD5
6c2eb335c425cee770d1d562ae1cfb66
-
SHA1
3400ec85857ddd3a7ddd806ca64d04dfb76a72e7
-
SHA256
c392cfc14008ee44b99625a3e9883efa542f05d1757171651f25be3fb37805c5
-
SHA512
80248158de38c208bca7f5125a454de24c0c944886780494db7903af01ff6fbe588696876cd9326f14ff4363667a6638627308e599abb576d376519380decda3
-
SSDEEP
1572864:dwokHzvWJwD+8DynrUGEDX2ey4b+HGzy62XjvftqTpChqxpWIdtF5a:dlkrWCNDIr1E6lmvEjXtqwhq/m
Score
10/10
Malware Config
Signatures
-
Bazar/Team9 Backdoor payload 1 IoCs
Processes:
resource yara_rule static1/unpack001/27051a.msi BazarBackdoorVar3 -
Bazarbackdoor family
Files
-
MDE_File_Sample_fe0cba1d9dd7a779a9c9c905cd27f00edcc0115e.zip.zip
Password: infected
-
27051a.msi.msi