General

  • Target

    264ee2148fd34018ee969a40fb148713

  • Size

    1.0MB

  • Sample

    231231-dytklsbfg2

  • MD5

    264ee2148fd34018ee969a40fb148713

  • SHA1

    d61ea7427e45ebbe4d66c19811a3afe188ed1aa6

  • SHA256

    2d1d9fe54857b61b2778926a9aca6b40ccccb9150fe5a024d7809786f07ca715

  • SHA512

    4b5facfe88ca135b85018a0f369edff882e406daabd1f0388f60d3080ac4d7d5c6eaed06de52b9780589ec07da89b0f3264cd100d3b60bfe75f9af3e6718a754

  • SSDEEP

    12288:9fHnu1hxBOwTdG7MDsDbQg779SweGIvdZOyjGU+G0VCspXMl3A6Gnzq9PBa8nTM:pHK3OwTd8MQDbQgHgUIv1jGUXuCs9qs

Malware Config

Extracted

Family

bazarloader

C2

104.248.170.50

Targets

    • Target

      264ee2148fd34018ee969a40fb148713

    • Size

      1.0MB

    • MD5

      264ee2148fd34018ee969a40fb148713

    • SHA1

      d61ea7427e45ebbe4d66c19811a3afe188ed1aa6

    • SHA256

      2d1d9fe54857b61b2778926a9aca6b40ccccb9150fe5a024d7809786f07ca715

    • SHA512

      4b5facfe88ca135b85018a0f369edff882e406daabd1f0388f60d3080ac4d7d5c6eaed06de52b9780589ec07da89b0f3264cd100d3b60bfe75f9af3e6718a754

    • SSDEEP

      12288:9fHnu1hxBOwTdG7MDsDbQg779SweGIvdZOyjGU+G0VCspXMl3A6Gnzq9PBa8nTM:pHK3OwTd8MQDbQgHgUIv1jGUXuCs9qs

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • Bazar/Team9 Loader payload

MITRE ATT&CK Matrix

Tasks