Extracted

• • Target
    Offer[2022.01.19_17-49].xll
  • Size 1.7MB
  • SHA256 20d63add3b82b4769281fdc673c10e8eb882a87525e9a51570c341b537560acf
  • MD5 5df2f3392bf5498ad0d52d2d479b3719
  • SHA1 23bfe7ecd153ac21616801eb69a60961b24fb33d
  • SHA512 bb79e37119e6670c7dce051d314b3c3b14a888fa470042877df3f24e1a4dfb0b0bd6c65e6a16387018d7b5482b04646853b5e2ef603d4f19f9b6529ed3c2dc18
  • MD5 SHA1 SHA512

  Score

  10^/10

  bazarloaderdropperloader

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Bazar/Team9 Loader payload

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2