Analysis
- max time kernel
3s - max time network
8s - platform
windows7_x64 - resource
win7v20201028 - submitted
01/04/2021, 03:26
General
- Target 61968c8debeae1e415a485c0b4d79b46.exe
- Size 285KB
- Sample210401-sdp73sx59a
- SHA256 65b652b99cd7ed6bd82bd0f258b03a483e0da9f3314b67fe9728eca76c3d59a2
Score
10/10
Malware Config
Signatures
- Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
- Bazar/Team9 Loader payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\61968c8debeae1e415a485c0b4d79b46.exe"C:\Users\Admin\AppData\Local\Temp\61968c8debeae1e415a485c0b4d79b46.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1064-2-0x000000013F480000-0x000000013F4CA000-memory.dmp
memory/1064-3-0x0000000180000000-0x0000000180035000-memory.dmp