BazarBackdoor: TrickBot gang’s new stealthy network-hacking malware
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Process Doppelgänging - T1055.013 Process Hollowing - T1055.012 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Process Doppelgänging - T1186 Process Hollowing - T1093 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID c42104be-b00f-4053-a473-9d215523cc2a
Fingerprint c48497799abebec1
Analysis status DONE
Considered CTI value 0
Text language
Published April 24, 2020, midnight
Added to db Sept. 11, 2022, 12:33 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline BazarBackdoor: TrickBot gang’s new stealthy network-hacking malware
Title BazarBackdoor: TrickBot gang’s new stealthy network-hacking malware
Detected Hints/Tags/Attributes 53/2/5
Source URLs
Redirection Url
Details Source https://www.bleepingcomputer.com/news/security/bazarbackdoor-trickbot-gang-s-new-stealthy-network-hacking-malware/
URL Provider
Details Provider Source level domain
Details bleepingcomputer.com www.bleepingcomputer.com
Attributes
Details Type #Events CTI Value
Details Domain 3 
sendgrid.net
Details File 3 
previewreport.doc
Details File 1 
preview.pdf
Details File 92 
c:\windows\system32\svchost.exe
Details File 1122 
svchost.exe