General

  • Target

    65dcb5a54a74368bddc0701fc8671200

  • Size

    1.1MB

  • Sample

    240118-ya98nsgfe6

  • MD5

    65dcb5a54a74368bddc0701fc8671200

  • SHA1

    64aaa5e1e7e8d1de79d5b7a9afb8a95860e8fd8a

  • SHA256

    d38427202dfbc619de931eb96038ef66820703a0b64d50dd052646ea8ab0fe89

  • SHA512

    88f1e81dab33f4e66816c55c5bd9609b5cdc638d8a8139e1a2151519a02cd4fa281a0c8f7b824ddc08f49b3e868d00c574ab04599cd140c681216f666ee12eeb

  • SSDEEP

    12288:FkcwMgrI3Nf+aQY5HAu+U2Brko9dHg4MtVXoKpma0S8dCaBSPZC1XZ1elHVx:Gcw02cARUUAgCoK2S8IyXfu1x

Malware Config

Extracted

Family

bazarloader

C2

greencloud46a.bazar

Targets

    • Target

      65dcb5a54a74368bddc0701fc8671200

    • Size

      1.1MB

    • MD5

      65dcb5a54a74368bddc0701fc8671200

    • SHA1

      64aaa5e1e7e8d1de79d5b7a9afb8a95860e8fd8a

    • SHA256

      d38427202dfbc619de931eb96038ef66820703a0b64d50dd052646ea8ab0fe89

    • SHA512

      88f1e81dab33f4e66816c55c5bd9609b5cdc638d8a8139e1a2151519a02cd4fa281a0c8f7b824ddc08f49b3e868d00c574ab04599cd140c681216f666ee12eeb

    • SSDEEP

      12288:FkcwMgrI3Nf+aQY5HAu+U2Brko9dHg4MtVXoKpma0S8dCaBSPZC1XZ1elHVx:Gcw02cARUUAgCoK2S8IyXfu1x

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • Bazar/Team9 Loader payload

MITRE ATT&CK Matrix

Tasks