Analysis
-
max time kernel
129s -
max time network
135s -
platform
windows10_x64 -
resource
win10v20210410 -
submitted
30-07-2021 15:25
General
-
Target
5afed1ccccb12db0f6da9f25c43d10b4e63995881b65526004cd6f6a390c792d.dll
-
Size
1.1MB
-
MD5
8f216511aa115a119ee15a10d067e8f2
-
SHA1
dcd717e5262762b11d1ffe2465c4bce71bf44d18
-
SHA256
5afed1ccccb12db0f6da9f25c43d10b4e63995881b65526004cd6f6a390c792d
-
SHA512
bded5745f20238edd1ab90aa6729e9494b8cc3269107058747a47797aaeea2730ca08edf6173497c74e214f81d3f3af405e5921ea2b3bf516cddfbb08dd94106
Score
10/10
Malware Config
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 2 IoCs
-
Blocklisted process makes network request 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5afed1ccccb12db0f6da9f25c43d10b4e63995881b65526004cd6f6a390c792d.dll,#11⤵
- Blocklisted process makes network request
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\5afed1ccccb12db0f6da9f25c43d10b4e63995881b65526004cd6f6a390c792d.dll,#1 6448255461⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
80KB
-
Filesize
80KB