Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d1e29954a320282f523cc4a6a22566ad06f944a4d6a5951449a582aba9bad0dc

  • Size

    488KB

  • Sample

    241018-dt46jstgpb

  • MD5

    fe48124be0ca6fa9c229d8f3c3f5feff

  • SHA1

    41140ac806f014ed4e39f90530a190453d4d93f3

  • SHA256

    d1e29954a320282f523cc4a6a22566ad06f944a4d6a5951449a582aba9bad0dc

  • SHA512

    e09db30e3e399c4c4c17a7ae444eb93268bead99ad13bdb623ef875be0a458eefdccbafe477b5d11025711fc17007841b6d5ca60e1ceb1f6b434b28d11fd4637

  • SSDEEP

    12288:t4qtPlcaE5Lnek6Aql6esonlkhssKDSZO:CelI5f6Aql6es6osWZO

Malware Config

Extracted

Family

bazarloader

C2

162.33.178.121

162.33.178.246

162.33.177.25

162.33.178.119

reddew28c.bazar

Targets

    • Target

      d1e29954a320282f523cc4a6a22566ad06f944a4d6a5951449a582aba9bad0dc

    • Size

      488KB

    • MD5

      fe48124be0ca6fa9c229d8f3c3f5feff

    • SHA1

      41140ac806f014ed4e39f90530a190453d4d93f3

    • SHA256

      d1e29954a320282f523cc4a6a22566ad06f944a4d6a5951449a582aba9bad0dc

    • SHA512

      e09db30e3e399c4c4c17a7ae444eb93268bead99ad13bdb623ef875be0a458eefdccbafe477b5d11025711fc17007841b6d5ca60e1ceb1f6b434b28d11fd4637

    • SSDEEP

      12288:t4qtPlcaE5Lnek6Aql6esonlkhssKDSZO:CelI5f6Aql6es6osWZO

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

    • Bazar/Team9 Loader payload

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.