Overview

overview

10

Static

static

3

f7e1a66545...18.dll

windows7-x64

10

f7e1a66545...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7e1a66545ed264fe25ad27db331d176_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240418-nckexsbd25

  • MD5

    f7e1a66545ed264fe25ad27db331d176

  • SHA1

    7cfe9271b5f9c863a7f21d939aa580af75f9b456

  • SHA256

    ec3c87f5eb81a4e96905157ad8778fed485f0eb84cfa65f1e84d421dc795bb84

  • SHA512

    63ceea7ba6ce6ff758b5c8fcebdedd79921f25cf569cdc28094b1356b645d050ca7d36a361ca737388101e2e1bf3b7c2ce166ad760bbe8349d40af4e34ec0574

  • SSDEEP

    12288:FkcwMgrI3Nf+aQY5HAu+U2Brko9dHg4MtVXoKpma0S8dCaBSPZC1XZ1elHVN:Gcw02cARUUAgCoK2S8IyXfu1N

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

greencloud46a.bazar

Targets

    • Target

      f7e1a66545ed264fe25ad27db331d176_JaffaCakes118

    • Size

      1.1MB

    • MD5

      f7e1a66545ed264fe25ad27db331d176

    • SHA1

      7cfe9271b5f9c863a7f21d939aa580af75f9b456

    • SHA256

      ec3c87f5eb81a4e96905157ad8778fed485f0eb84cfa65f1e84d421dc795bb84

    • SHA512

      63ceea7ba6ce6ff758b5c8fcebdedd79921f25cf569cdc28094b1356b645d050ca7d36a361ca737388101e2e1bf3b7c2ce166ad760bbe8349d40af4e34ec0574

    • SSDEEP

      12288:FkcwMgrI3Nf+aQY5HAu+U2Brko9dHg4MtVXoKpma0S8dCaBSPZC1XZ1elHVN:Gcw02cARUUAgCoK2S8IyXfu1N

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks