Overview

overview

10

Static

static

1

71fb9e938a...18.exe

windows7-x64

1

71fb9e938a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    71fb9e938a34ba1fae84d05f29cd577b_JaffaCakes118

  • Size

    251KB

  • Sample

    240525-pwm6lacb55

  • MD5

    71fb9e938a34ba1fae84d05f29cd577b

  • SHA1

    4a68253ed05fcf9a6476307cf06952694e6a91ac

  • SHA256

    5a8c4049c0e4005dc517d1237e9e0263b6db3f247149e260f4e6004050c5254f

  • SHA512

    12496a63938da925f2376bc8d5f105f66e2d38ca59bc5a49f7a771b8e0b05c11d846b3abcfdb318ddb62747ca346285bc665f1618aaa1c9804a29ac6a7accf3e

  • SSDEEP

    3072:c3uquE7K6wTKwinObMIZQCqW9vYjaXvI3f0/LZdUYKRxca61h8Hl4D1NmyHuyse2:cel1T7kObMKQCiaoEj5j8HMITeBLZm

Score
10/10
bazarloaderdropperloader

Malware Config

Targets

    • Target

      71fb9e938a34ba1fae84d05f29cd577b_JaffaCakes118

    • Size

      251KB

    • MD5

      71fb9e938a34ba1fae84d05f29cd577b

    • SHA1

      4a68253ed05fcf9a6476307cf06952694e6a91ac

    • SHA256

      5a8c4049c0e4005dc517d1237e9e0263b6db3f247149e260f4e6004050c5254f

    • SHA512

      12496a63938da925f2376bc8d5f105f66e2d38ca59bc5a49f7a771b8e0b05c11d846b3abcfdb318ddb62747ca346285bc665f1618aaa1c9804a29ac6a7accf3e

    • SSDEEP

      3072:c3uquE7K6wTKwinObMIZQCqW9vYjaXvI3f0/LZdUYKRxca61h8Hl4D1NmyHuyse2:cel1T7kObMKQCiaoEj5j8HMITeBLZm

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Tries to connect to .bazar domain

      Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks