API tools faq
paste
ExecuteMalware

2021-02-15 Likely Bazar/BazarLoader IOCs

ExecuteMalware
Feb 15th, 2021
4,422
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.94 KB | None | 0 0
raw download clone embed print report
  1. THREAT IDENTIFICATION: Bazar/BazarLoader/CobaltStrike Stager??
  2.  
  3. The landing page had been taken down by the time I tried to get the payload.
  4.  
  5. SUBJECTS OBSERVED
  6. , lawyer request
  7. Lastname, lawyer request
  8.  
  9. SENDERS OBSERVED
  10. [email protected]
  11. [email protected]
  12. [email protected]
  13. [email protected]
  14. [email protected]
  15. [email protected]
  16. [email protected]
  17. [email protected]
  18. [email protected]
  19. [email protected]
  20. [email protected]
  21. [email protected]
  22. [email protected]
  23. [email protected]
  24.  
  25. BAZAR LANDING PAGES
  26. https://lawyer-complaint-request-11f.subscribemenow.com/
  27.  
  28. BAZAR MALDOC FILE HASHES
  29. N/A
  30.  
  31. BAZAR PAYLOAD DOWNLOAD
  32. N/A
  33.  
  34. BAZAR PAYLOAD FILE HASHES
  35. N/A
  36.  
  37. BAZAR C2
  38. N/A
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!