Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows10_x64
  • resource
    win10-en-20211014
  • submitted
    15-10-2021 22:22

General

  • Target

    1.dll

  • Size

    539KB

  • MD5

    0fd8135a2957037c52811df5f68ddf22

  • SHA1

    448630a1dea594d373c03b9ff6b48b70e68442b5

  • SHA256

    04addd98627d2e486b64aa9e61598d85c4501c2865313144cc7e1c668bd34ef8

  • SHA512

    1069bc169bdceeea1e4c63b622c9408b116dbabb990f29b2fa29352e3dca3b94520e43b21a0ba641720ffce919a4063560f68884730e6f6a2587996a1c49b3b9

Malware Config

Signatures

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

  • Bazar/Team9 Loader payload 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1.dll,#1
    1⤵
      PID:3492

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3492-115-0x0000017F00130000-0x0000017F0015A000-memory.dmp
      Filesize

      168KB