StartFunc
Static task
static1
Behavioral task
behavioral1
Sample
0c2e254376127f76d44fc9276000697e45a2977fca4384705e84994ab63fdc37.dll
Resource
win7-en-20211014
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
0c2e254376127f76d44fc9276000697e45a2977fca4384705e84994ab63fdc37.dll
Resource
win10-en-20211104
windows10_x64
0 signatures
0 seconds
General
-
Target
0c2e254376127f76d44fc9276000697e45a2977fca4384705e84994ab63fdc37
-
Size
115KB
-
MD5
abcecad6ec78064bf7de52f3cda8e604
-
SHA1
b4a00d993b9354a8f337600999eeb578b0065de2
-
SHA256
0c2e254376127f76d44fc9276000697e45a2977fca4384705e84994ab63fdc37
-
SHA512
cde2f88377073e7b579a0005abea7207c5048026fcb245e538607db17509ffb891eef136018e810cd7705b0985b76be235f9a6387270e111d003e40fb98f8c4d
Score
10/10
Malware Config
Extracted
Family
bazarloader
C2
54.184.178.68
34.209.40.84
Signatures
-
Bazar/Team9 Loader payload 1 IoCs
Processes:
resource yara_rule sample BazarLoaderVar1 -
Bazarloader family
Files
-
0c2e254376127f76d44fc9276000697e45a2977fca4384705e84994ab63fdc37.dll windows x64
Exports
Exports