BazarBackdoor Malware Analysis

File Properties

SHA256: a75eed2248226fdf4940c516c34bba62cd9e441de8b964d36a9485efe2a4053b

MD5: 41da40d696aff915b99f69a73b2c8d39

File Type: exe

Size: 194,048 byte

First Seen: 2021-09-13

AV Signature: BazaLoader

Imphash: 2e693c451958293f4a91702375b1fcab

Reported By: AndreGironda

Tags: BazarBackdoor, dll

Static analysis: metadata-based (sample not downloaded)

BazarBackdoor — Malware Profile

BazarBackdoor BazaLoader TrickBot follow-on. DragTest.dll. accNavigate COM injection.

Malware Type
Backdoor
Programming Language
C++
C2 Protocol
HTTPS
Target Systems
Küresel

Capabilities & Behavior

Uzaktan Erişim & Kontrol
Keylogger
Ekran Görüntüsü
Webcam Erişimi
Dosya Yönetimi
Süreç Yönetimi
Komut Yürütme
Kalıcılık Mekanizması

IOC List (1 indicators)

IOC — BazarBackdoor
# FILEPATH a75eed2248226fdf4940c516c34bba62cd9e441de8b964d36a9485efe2a4053b
TypeValueNote
filepath a75eed2248226fdf4940c516c34bba62cd9e441de8b964d36a9485efe2a4053b PDB
Tags
BazarBackdoordll