Overview

overview

10

Static

static

061dfb6a25...52.dll

windows7_x64

10

061dfb6a25...52.dll

windows10_x64

10

06d55f75d7...d2.dll

windows7_x64

10

06d55f75d7...d2.dll

windows10_x64

10

24401ac43b...65.dll

windows7_x64

1

24401ac43b...65.dll

windows10_x64

1

260e2d5769...40.dll

windows7_x64

10

260e2d5769...40.dll

windows10_x64

10

26cd036960...18.dll

windows7_x64

10

26cd036960...18.dll

windows10_x64

10

2a0a88a2e5...4a.dll

windows7_x64

10

2a0a88a2e5...4a.dll

windows10_x64

3

2f33217d51...94.dll

windows7_x64

10

2f33217d51...94.dll

windows10_x64

10

336cdd146b...da.dll

windows7_x64

10

336cdd146b...da.dll

windows10_x64

10

417c1828d9...73.dll

windows7_x64

10

417c1828d9...73.dll

windows10_x64

10

4d3095c796...ee.dll

windows7_x64

10

4d3095c796...ee.dll

windows10_x64

10

54e526fe05...4c.dll

windows7_x64

1

54e526fe05...4c.dll

windows10_x64

1

6402b33d72...3b.dll

windows7_x64

10

6402b33d72...3b.dll

windows10_x64

10

64c044cb3e...db.dll

windows7_x64

10

64c044cb3e...db.dll

windows10_x64

10

671f477c30...4e.dll

windows7_x64

10

671f477c30...4e.dll

windows10_x64

10

67785724b6...ce.dll

windows7_x64

1

67785724b6...ce.dll

windows10_x64

3

6c6934613a...fb.dll

windows7_x64

10

6c6934613a...fb.dll

windows10_x64

10

Resubmissions

01-11-2021 12:31

211101-pp5r3ahha4 10

31-10-2021 09:03

211031-k1bwxacfaq 10

14-10-2021 01:44

211014-b6aflafeg4 10

Analysis

  • max time kernel
    147s
  • max time network
    162s
  • platform
    windows7_x64
  • resource
    win7-en-20210920
  • submitted
    14-10-2021 01:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    417c1828d98ba4f05f7a2edb71a9105f0aebf3d554393970b96e59d4db7b4473.dll

  • Size

    359KB

  • MD5

    4f18fd01d6afd232553fbbf602b2a4e2

  • SHA1

    e50a8e3bfb891dc723f5c7fc2276055102d0a097

  • SHA256

    417c1828d98ba4f05f7a2edb71a9105f0aebf3d554393970b96e59d4db7b4473

  • SHA512

    750493256643799b3de954298874f6df1d87bf6fd3afa259689af2ba9159374f274937490be6159650237a74778e5565e4f9d4e5e359f9e71cc1c5fd385b4dd3

Score
10/10
bazarloaderdropperloader

Malware Config

Signatures

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader
  • Bazar/Team9 Loader payload 1 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\417c1828d98ba4f05f7a2edb71a9105f0aebf3d554393970b96e59d4db7b4473.dll
    1⤵
      PID:1124

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1124-54-0x000007FEFB6B1000-0x000007FEFB6B3000-memory.dmp
      Filesize

      8KB

      Download
    • memory/1124-55-0x00000000004B0000-0x00000000004DC000-memory.dmp
      Filesize

      176KB

      Download