Overview

overview

10

Static

static

3cd.dll

windows7_x64

10

3cd.dll

windows10_x64

10

Analysis

  • max time kernel
    129s
  • max time network
    129s
  • platform
    windows10_x64
  • resource
    win10-en-20211104
  • submitted
    25-11-2021 16:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3cd.dll

  • Size

    278KB

  • MD5

    bbaa164e1b2752d98f23ebe84efc4760

  • SHA1

    2ce4e7b05f2110b6da34bf48fc5395e6757fe622

  • SHA256

    3cd9a3de390cebe32e11063f8e9db0f3be3fad01a58e1e3f99152b08198ae8c5

  • SHA512

    28637c6f5663e35d9cab8634741a67e2f655a23aa66ba7e84521cf0dc99d6100b8b519d690b403f1c03158c52db27a495eea90079ff438e4da2249a5c3c6bb3e

Score
10/10
bazarloaderdropperloader

Malware Config

Signatures

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader
  • Bazar/Team9 Loader payload 2 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\3cd.dll
    1⤵
      PID:3440
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd.dll,DllRegisterServer {08B37DC6-0465-41FA-B682-0C2A331F938C}
      1⤵
        PID:3956

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3440-118-0x00000000025A0000-0x00000000026A8000-memory.dmp
        Filesize

        1.0MB

        Download
      • memory/3956-119-0x0000024481E70000-0x0000024481F78000-memory.dmp
        Filesize

        1.0MB

        Download