Overview
overview
10Static
static
061dfb6a25...52.dll
windows7_x64
10061dfb6a25...52.dll
windows10_x64
1006d55f75d7...d2.dll
windows7_x64
1006d55f75d7...d2.dll
windows10_x64
1024401ac43b...65.dll
windows7_x64
124401ac43b...65.dll
windows10_x64
1260e2d5769...40.dll
windows7_x64
10260e2d5769...40.dll
windows10_x64
1026cd036960...18.dll
windows7_x64
1026cd036960...18.dll
windows10_x64
102a0a88a2e5...4a.dll
windows7_x64
102a0a88a2e5...4a.dll
windows10_x64
32f33217d51...94.dll
windows7_x64
102f33217d51...94.dll
windows10_x64
10336cdd146b...da.dll
windows7_x64
10336cdd146b...da.dll
windows10_x64
10417c1828d9...73.dll
windows7_x64
10417c1828d9...73.dll
windows10_x64
104d3095c796...ee.dll
windows7_x64
104d3095c796...ee.dll
windows10_x64
1054e526fe05...4c.dll
windows7_x64
154e526fe05...4c.dll
windows10_x64
16402b33d72...3b.dll
windows7_x64
106402b33d72...3b.dll
windows10_x64
1064c044cb3e...db.dll
windows7_x64
1064c044cb3e...db.dll
windows10_x64
10671f477c30...4e.dll
windows7_x64
10671f477c30...4e.dll
windows10_x64
1067785724b6...ce.dll
windows7_x64
167785724b6...ce.dll
windows10_x64
36c6934613a...fb.dll
windows7_x64
106c6934613a...fb.dll
windows10_x64
10Resubmissions
01-11-2021 12:31
211101-pp5r3ahha4 1031-10-2021 09:03
211031-k1bwxacfaq 1014-10-2021 01:44
211014-b6aflafeg4 10Analysis
-
max time kernel
148s -
max time network
147s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
14-10-2021 01:44
Static task
static1
Behavioral task
behavioral1
Sample
061dfb6a251e536f700a295239652dafab34aee5e5145320d1d57e3fca5e5d52.dll
Resource
win7-en-20210920
Behavioral task
behavioral2
Sample
061dfb6a251e536f700a295239652dafab34aee5e5145320d1d57e3fca5e5d52.dll
Resource
win10v20210408
Behavioral task
behavioral3
Sample
06d55f75d7c76d6924c0b8439fa3cda28b89284204a6db982e4baf3a37fb35d2.dll
Resource
win7-en-20210920
Behavioral task
behavioral4
Sample
06d55f75d7c76d6924c0b8439fa3cda28b89284204a6db982e4baf3a37fb35d2.dll
Resource
win10v20210408
Behavioral task
behavioral5
Sample
24401ac43b6dbb7048cb27425b4f0f76a9b20b6b4fffa33ff8091c3c11ef8365.dll
Resource
win7-en-20210920
Behavioral task
behavioral6
Sample
24401ac43b6dbb7048cb27425b4f0f76a9b20b6b4fffa33ff8091c3c11ef8365.dll
Resource
win10v20210408
Behavioral task
behavioral7
Sample
260e2d5769f0a50a7b49d4c43059221eb7acc4b9fc460763e0cfcd793f2a6840.dll
Resource
win7-en-20210920
Behavioral task
behavioral8
Sample
260e2d5769f0a50a7b49d4c43059221eb7acc4b9fc460763e0cfcd793f2a6840.dll
Resource
win10-en-20210920
Behavioral task
behavioral9
Sample
26cd03696045fb93b415b022fa6bc832098394bf362f4b4c4e897e9550d12618.dll
Resource
win7v20210408
Behavioral task
behavioral10
Sample
26cd03696045fb93b415b022fa6bc832098394bf362f4b4c4e897e9550d12618.dll
Resource
win10-en-20210920
Behavioral task
behavioral11
Sample
2a0a88a2e5f9cafa10a48d63bdfcdf965b72c25978ab46cf28e795dbedc9624a.dll
Resource
win7v20210408
Behavioral task
behavioral12
Sample
2a0a88a2e5f9cafa10a48d63bdfcdf965b72c25978ab46cf28e795dbedc9624a.dll
Resource
win10-en-20210920
Behavioral task
behavioral13
Sample
2f33217d51117cf3d6c6ed3ab50724964367fc7a85e1bb1dc87d241b8d953894.dll
Resource
win7v20210408
Behavioral task
behavioral14
Sample
2f33217d51117cf3d6c6ed3ab50724964367fc7a85e1bb1dc87d241b8d953894.dll
Resource
win10-en-20210920
Behavioral task
behavioral15
Sample
336cdd146beca939c6d1e3e3c00cc10ec2d6e859a18d350bff937ad5194c27da.dll
Resource
win7-en-20210920
Behavioral task
behavioral16
Sample
336cdd146beca939c6d1e3e3c00cc10ec2d6e859a18d350bff937ad5194c27da.dll
Resource
win10v20210408
Behavioral task
behavioral17
Sample
417c1828d98ba4f05f7a2edb71a9105f0aebf3d554393970b96e59d4db7b4473.dll
Resource
win7-en-20210920
Behavioral task
behavioral18
Sample
417c1828d98ba4f05f7a2edb71a9105f0aebf3d554393970b96e59d4db7b4473.dll
Resource
win10v20210408
Behavioral task
behavioral19
Sample
4d3095c7965c7bdd32b81b72c95f767134915cf08ebe1237721ed5208de4beee.dll
Resource
win7-en-20210920
Behavioral task
behavioral20
Sample
4d3095c7965c7bdd32b81b72c95f767134915cf08ebe1237721ed5208de4beee.dll
Resource
win10v20210408
Behavioral task
behavioral21
Sample
54e526fe059a3f25cdaed954e32f44eadffb3e51548658409468dcf2d63b634c.dll
Resource
win7-en-20210920
Behavioral task
behavioral22
Sample
54e526fe059a3f25cdaed954e32f44eadffb3e51548658409468dcf2d63b634c.dll
Resource
win10-en-20210920
Behavioral task
behavioral23
Sample
6402b33d729c8bb44881747a8f397f4aec408bf5e18b9af6fd86cdfa3f96323b.dll
Resource
win7v20210408
Behavioral task
behavioral24
Sample
6402b33d729c8bb44881747a8f397f4aec408bf5e18b9af6fd86cdfa3f96323b.dll
Resource
win10-en-20210920
Behavioral task
behavioral25
Sample
64c044cb3ec26babdd17107b2aa6ded60b22473c4e2943e1fcc03df8bc2e0edb.dll
Resource
win7v20210408
Behavioral task
behavioral26
Sample
64c044cb3ec26babdd17107b2aa6ded60b22473c4e2943e1fcc03df8bc2e0edb.dll
Resource
win10-en-20210920
Behavioral task
behavioral27
Sample
671f477c3039786c5f3553760377be03b91bfb66f31ba9370ed2193192cf5b4e.dll
Resource
win7v20210408
Behavioral task
behavioral28
Sample
671f477c3039786c5f3553760377be03b91bfb66f31ba9370ed2193192cf5b4e.dll
Resource
win10-en-20210920
Behavioral task
behavioral29
Sample
67785724b67ecd79b7cd4c64a249794b9abda8b680fe52a0ce85bb83ddfb6cce.dll
Resource
win7v20210408
Behavioral task
behavioral30
Sample
67785724b67ecd79b7cd4c64a249794b9abda8b680fe52a0ce85bb83ddfb6cce.dll
Resource
win10-en-20210920
Behavioral task
behavioral31
Sample
6c6934613abde41f82043bb7c269a1e614920a83a2b90eaf325ca7b998183efb.dll
Resource
win7-en-20210920
Behavioral task
behavioral32
Sample
6c6934613abde41f82043bb7c269a1e614920a83a2b90eaf325ca7b998183efb.dll
Resource
win10v20210408
General
-
Target
6c6934613abde41f82043bb7c269a1e614920a83a2b90eaf325ca7b998183efb.dll
-
Size
172KB
-
MD5
f943853cddc15b59823962b28f08b809
-
SHA1
3e46675756a6f0dc722c620f3bc12610fe27c010
-
SHA256
6c6934613abde41f82043bb7c269a1e614920a83a2b90eaf325ca7b998183efb
-
SHA512
1a524916b6af5b071e2d4e533fb302b062383c2edb941a7a6e3d9e92897b2e7f612aa444eeff8c4de6499421f3823d54efa9b375b22c0fe6d301ff1bcb632985
Malware Config
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 2 IoCs
resource yara_rule behavioral32/memory/636-117-0x00000000027B0000-0x00000000028DC000-memory.dmp BazarLoaderVar6 behavioral32/memory/596-118-0x000001F2DD410000-0x000001F2DD53C000-memory.dmp BazarLoaderVar6
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\6c6934613abde41f82043bb7c269a1e614920a83a2b90eaf325ca7b998183efb.dll1⤵PID:636
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\6c6934613abde41f82043bb7c269a1e614920a83a2b90eaf325ca7b998183efb.dll,DllRegisterServer {66473296-9BFD-420D-88E9-9F0AE91234E1}1⤵PID:596