Analysis
- max time kernel
139s - max time network
147s - platform
windows7_x64 - resource
win7v20201028 - submitted
15/12/2020, 20:26
General
- Target bddbceefe4185693ef9015d0a535eb7e034b9ec3.exe
- Size 336KB
- Sample201215-3meshd5bpn
- SHA256 35683ac5bbcc63eb33d552878d02ff44582161d1ea1ff969b14ea326083ea780
Score
10/10
Malware Config
Signatures
- Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
- Bazar/Team9 Loader payload 2 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bddbceefe4185693ef9015d0a535eb7e034b9ec3.exe"C:\Users\Admin\AppData\Local\Temp\bddbceefe4185693ef9015d0a535eb7e034b9ec3.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2024-2-0x0000000000240000-0x000000000025F000-memory.dmp
memory/2024-3-0x0000000000280000-0x000000000029C000-memory.dmp