Overview

overview

10

Static

static

cffg.dll

windows7_x64

10

cffg.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cffg.dll

  • Size

    601KB

  • Sample

    211025-w96nesgec7

  • MD5

    51b142045a760b0f8adb2062994f9546

  • SHA1

    87917ffdb0b187f1ae31b02d96ed52a325335226

  • SHA256

    2d0a527a47bf7655dd64f3ad7e8b2beca2a84c5b191aceed95bca86ce23a334d

  • SHA512

    bd7daff31c21089a96183f6edb7cf20cb7b4de4a73dbabb1a143a18777579ff59b3fff66a111577c49ce9e4a8ed1b9211ab770de70d098b3682642c5d94099d5

Score
10/10
bazarloaderdropperloader

Malware Config

Targets

    • Target

      cffg.dll

    • Size

      601KB

    • MD5

      51b142045a760b0f8adb2062994f9546

    • SHA1

      87917ffdb0b187f1ae31b02d96ed52a325335226

    • SHA256

      2d0a527a47bf7655dd64f3ad7e8b2beca2a84c5b191aceed95bca86ce23a334d

    • SHA512

      bd7daff31c21089a96183f6edb7cf20cb7b4de4a73dbabb1a143a18777579ff59b3fff66a111577c49ce9e4a8ed1b9211ab770de70d098b3682642c5d94099d5

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks