General

  • Target

    8661bd7d893fe1dd2109fac55cf9cea5f609012769732039e20165a3198c1086

  • Size

    733KB

  • Sample

    240410-pjbxssfd56

  • MD5

    14572c3002b0e94ff87878d366bc277d

  • SHA1

    1585af5d6c0485a9333d898f2433128707f0c924

  • SHA256

    8661bd7d893fe1dd2109fac55cf9cea5f609012769732039e20165a3198c1086

  • SHA512

    7297dc2126cf73428d3e8c26f5b76a25d7051810320781f6efb8cc9ba88077972236dc0b1363dfd2efac4a320b9cdb3d4c11a5d0b9f8453b06e2eb1250a8c39e

  • SSDEEP

    12288:yy9x20pS5wVnb9BNobEyindCqUf+sgUGzS8KseBOwLc9:yyf2Qnb9BNcELdBU/gUI4OwI

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      8661bd7d893fe1dd2109fac55cf9cea5f609012769732039e20165a3198c1086

    • Size

      733KB

    • MD5

      14572c3002b0e94ff87878d366bc277d

    • SHA1

      1585af5d6c0485a9333d898f2433128707f0c924

    • SHA256

      8661bd7d893fe1dd2109fac55cf9cea5f609012769732039e20165a3198c1086

    • SHA512

      7297dc2126cf73428d3e8c26f5b76a25d7051810320781f6efb8cc9ba88077972236dc0b1363dfd2efac4a320b9cdb3d4c11a5d0b9f8453b06e2eb1250a8c39e

    • SSDEEP

      12288:yy9x20pS5wVnb9BNobEyindCqUf+sgUGzS8KseBOwLc9:yyf2Qnb9BNcELdBU/gUI4OwI

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • Bazar/Team9 Loader payload

MITRE ATT&CK Matrix

Tasks