Overview

overview

10

Static

static

3

2024-09-28...id.exe

windows7-x64

10

2024-09-28...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-28_5e7080ef6f95218618250291824c02d7_bazarloader_icedid

  • Size

    280KB

  • Sample

    240928-ke65xswekq

  • MD5

    5e7080ef6f95218618250291824c02d7

  • SHA1

    1d08b94efe4ad5fca6f60f7d1c4f6312365d0b4b

  • SHA256

    39655f6b003a6f5ef02b4ed8878f79f623d4d38b7832fa18f6b2e4e2d2232222

  • SHA512

    394c23f48bf09e07caa808f8457319148f848b8df16b7657340b8313b9bd858e7d2f53a2bb0c2712afce9b8a19f7e472c72cddfeaf1d7f725bbc127cf8775a5a

  • SSDEEP

    6144:3Yc2uFGmzyW2ckd91ylUWCLH07TdDMmqxlGTyY2VBP478rhbm:3YcrFG7GljC707TBkx8Tv2/478I

Score
10/10
bazarloaderdropperloader

Malware Config

Targets

    • Target

      2024-09-28_5e7080ef6f95218618250291824c02d7_bazarloader_icedid

    • Size

      280KB

    • MD5

      5e7080ef6f95218618250291824c02d7

    • SHA1

      1d08b94efe4ad5fca6f60f7d1c4f6312365d0b4b

    • SHA256

      39655f6b003a6f5ef02b4ed8878f79f623d4d38b7832fa18f6b2e4e2d2232222

    • SHA512

      394c23f48bf09e07caa808f8457319148f848b8df16b7657340b8313b9bd858e7d2f53a2bb0c2712afce9b8a19f7e472c72cddfeaf1d7f725bbc127cf8775a5a

    • SSDEEP

      6144:3Yc2uFGmzyW2ckd91ylUWCLH07TdDMmqxlGTyY2VBP478rhbm:3YcrFG7GljC707TBkx8Tv2/478I

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    • Tries to connect to .bazar domain

      Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks