Overview

overview

10

Static

static

3cd.dll

windows7_x64

10

3cd.dll

windows10_x64

10

Analysis

  • max time kernel
    132s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-en-20211014
  • submitted
    25-11-2021 16:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3cd.dll

  • Size

    278KB

  • MD5

    bbaa164e1b2752d98f23ebe84efc4760

  • SHA1

    2ce4e7b05f2110b6da34bf48fc5395e6757fe622

  • SHA256

    3cd9a3de390cebe32e11063f8e9db0f3be3fad01a58e1e3f99152b08198ae8c5

  • SHA512

    28637c6f5663e35d9cab8634741a67e2f655a23aa66ba7e84521cf0dc99d6100b8b519d690b403f1c03158c52db27a495eea90079ff438e4da2249a5c3c6bb3e

Score
10/10
bazarloaderdropperloader

Malware Config

Signatures

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader
  • Bazar/Team9 Loader payload 2 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\3cd.dll
    1⤵
      PID:744
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd.dll,DllRegisterServer {A6CC65B6-C0A4-4BFD-BB64-38590FCB78F0}
      1⤵
        PID:1640

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/744-55-0x000007FEFBFE1000-0x000007FEFBFE3000-memory.dmp
        Filesize

        8KB

        Download
      • memory/744-56-0x0000000001D90000-0x0000000001E98000-memory.dmp
        Filesize

        1.0MB

        Download
      • memory/1640-57-0x0000000001CA0000-0x0000000001DA8000-memory.dmp
        Filesize

        1.0MB

        Download