Overview

overview

10

Static

static

Retalit LLC (3).exe

windows7_x64

10

Retalit LLC (3).exe

windows10_x64

10

Analysis

  • max time kernel
    140s
  • max time network
    152s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    16/09/2020, 07:41

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Retalit LLC (3).exe
  • Size 251KB
  • Sample200916-erdmse41px
  • SHA256 5a8c4049c0e4005dc517d1237e9e0263b6db3f247149e260f4e6004050c5254f
  • MD5 SHA1 SHA512
Score
10/10
loaderdropperbazarloader

Malware Config

Signatures

  • Bazar Loader 7 IoCs

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Retalit LLC (3).exe
    "C:\Users\Admin\AppData\Local\Temp\Retalit LLC (3).exe"
    1⤵
    • Bazar Loader
    • Suspicious behavior: EnumeratesProcesses
    PID:3828

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/3828-0-0x0000018BE29B0000-0x0000018BE29D8000-memory.dmp
        Download

        memory/3828-1-0x0000000180000000-0x000000018002A000-memory.dmp
        Download