General

  • Target

    b2efe07dd68da755d79b49686971facd_JaffaCakes118

  • Size

    154KB

  • Sample

    240821-lfy2davckj

  • MD5

    b2efe07dd68da755d79b49686971facd

  • SHA1

    69ebafcb5e59c406aad22409006a62df741b2d40

  • SHA256

    1be9c4bac9d5b347464e5b870a50aa2b28e6598f3f4e34863b4f806543abe4ed

  • SHA512

    4ae1b3eb49e1d9ca70c92a5d58daae769d3b3232e2d9b6c53defce5d3675010138890b019706b2ef197666e71d02ed7ea4a36887bca3d88dbe288e5dc960270e

  • SSDEEP

    3072:gV4JkQogL/GP/0I/f57Jamii72FuSWsN5aac+a3v:pSQolXz/fpz37Q5Xa3v

Malware Config

Targets

    • Target

      b2efe07dd68da755d79b49686971facd_JaffaCakes118

    • Size

      154KB

    • MD5

      b2efe07dd68da755d79b49686971facd

    • SHA1

      69ebafcb5e59c406aad22409006a62df741b2d40

    • SHA256

      1be9c4bac9d5b347464e5b870a50aa2b28e6598f3f4e34863b4f806543abe4ed

    • SHA512

      4ae1b3eb49e1d9ca70c92a5d58daae769d3b3232e2d9b6c53defce5d3675010138890b019706b2ef197666e71d02ed7ea4a36887bca3d88dbe288e5dc960270e

    • SSDEEP

      3072:gV4JkQogL/GP/0I/f57Jamii72FuSWsN5aac+a3v:pSQolXz/fpz37Q5Xa3v

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • Tries to connect to .bazar domain

      Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.

MITRE ATT&CK Matrix

Tasks