Overview

overview

10

Static

static

3

dl2.exe

windows7-x64

1

dl2.exe

windows10-ltsc 2021-x64

10

Resubmissions

07/02/2026, 08:09

260207-j2gywahy3c3

05/09/2025, 03:39

250905-d7llcsvvg13

22/07/2025, 13:54

250722-q7jszscp3v10

22/07/2025, 13:49

250722-q41x4awwdv3

01/11/2024, 12:33

241101-pradyaypdv10

27/10/2024, 23:08

241027-24hmasskhj10

20/10/2024, 16:28

241020-tyzdvsxgqb3

20/10/2024, 16:26

241020-tx2gtszekk3

06/10/2024, 17:53

241006-wgrzka1eme

02/10/2024, 11:53

241002-n2j6fsycqb3

Sharing

Copy URL Twitter E-mail

General

  • Target
    230823-139hyshd3w_pw_infected.zip
  • Size 472KB
  • Sample241101-pradyaypdv
  • SHA256 8ef176944e54df85db028979ceb66b2b6e807b1615f4254c273d4b433caec0dd
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
bazarbackdoorbackdoor

Malware Config

Targets

    • Target
      dl2.exe
    • Size 849KB
    • SHA256 342f04c4720590c40d24078d46d9b19d8175565f0af460598171d58f5ffc48f3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    bazarbackdoorbackdoor

    • BazarBackdoor

      Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

      backdoorbazarbackdoor

    • Bazarbackdoor family

      bazarbackdoor

    • Tries to connect to .bazar domain

      Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks