General
- Target GaocQhI1_PVadIF.zip
- Size 554KB
- Sample220119-161efsdfck
- SHA256 afadc93755184cb687170be7b9499cb81886dabe575fa40bef3bf3897a87493f
Score
10/10
Malware Config
Targets
-
- Target new_working_conditions[2022.01.19_17-49].xll
- Size 1.7MB
- SHA256 29c231e5e6559618d30532ef0b4585fda85b9b367aa81a5d91aba1932ae68658
Score10/10Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Bazar/Team9 Loader payload
Blocklisted process makes network request
Loads dropped DLL