Resubmissions
01-11-2021 12:31
211101-pp5r3ahha4 1031-10-2021 09:03
211031-k1bwxacfaq 1014-10-2021 01:44
211014-b6aflafeg4 10Analysis
-
max time kernel
583s -
max time network
602s -
platform
windows11_x64 -
resource
win11 -
submitted
01-11-2021 12:31
General
-
Target
029b714502283599a5efb86d41c48fd46751ab727b707bde620e517ec3aa3c39.dll
-
Size
288KB
-
MD5
6baeb5a0cd83e3a9878dc4d6d7a5509c
-
SHA1
93e655f671e4485473f0803787097e1f6a48a64c
-
SHA256
029b714502283599a5efb86d41c48fd46751ab727b707bde620e517ec3aa3c39
-
SHA512
dacd268b6bfad43f6c800a4c133b2e9d59477b77a93018d4c1c1cbf7086d5cdb400073bcc06a55a88fa80dd49d4e214332695ef9ed2ff6ea323c26441c8531b8
Score
10/10
Malware Config
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\029b714502283599a5efb86d41c48fd46751ab727b707bde620e517ec3aa3c39.dll1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\029b714502283599a5efb86d41c48fd46751ab727b707bde620e517ec3aa3c39.dll,StartW {9736927E-4415-4FDB-8582-A0998AD8E070}1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2760-146-0x0000000002A10000-0x0000000002AEC000-memory.dmpFilesize
880KB
-
memory/2924-147-0x00000277B81D0000-0x00000277B82AC000-memory.dmpFilesize
880KB