Resubmissions

09-08-2023 15:40

230809-s39vqaeb2w 10

09-08-2023 15:21

230809-srkrfscc95 10

General

  • Target

    https://www.1377x.to/torrent/5362489/WorldBox-God-Simulator-v0-14-3/

  • Sample

    230809-s39vqaeb2w

Malware Config

Targets

    • Target

      https://www.1377x.to/torrent/5362489/WorldBox-God-Simulator-v0-14-3/

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • Bazar/Team9 Loader payload

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Network Service Discovery

1
T1046

System Information Discovery

1
T1082

Tasks