Overview

overview

10

Static

static

6ccf11aecc...32.dll

windows7_x64

10

6ccf11aecc...32.dll

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    6ccf11aecc3b829698cdf1972f5d8732.dll
  • Size 1.2MB
  • Sample210731-773a5vj78a
  • SHA256 dbcc44b0fc980a62f0d950b32634d5d2d03785a0e7b7659cc3f2bf220d6c3f10
  • MD5 SHA1 SHA512
Score
10/10
suricata

Malware Config

Targets

    • Target
      6ccf11aecc3b829698cdf1972f5d8732.dll
    • Size 1.2MB
    • SHA256 dbcc44b0fc980a62f0d950b32634d5d2d03785a0e7b7659cc3f2bf220d6c3f10
    • MD5 SHA1 SHA512
    Score
    10/10
    suricata

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • suricata: ET MALWARE BazaLoader Activity (GET)

      suricata

    • suricata: ET MALWARE Observed Malicious SSL Cert (BazaLoader CnC)

      suricata

    • suricata: ET MALWARE Observed Malicious SSL Cert (Bazar Backdoor)

      suricata

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks