General
- Target 2045ecc425209bfc5e090d868856afe74cf0cb13dc63f8a00b656aac3fe438ea
- Size 549KB
- Sample220128-k4cbvaachk
- SHA256 7a196fcc8f465cdf1ba0734e381114c6c03e33d0a05a601240029918b7a69035
Score
10/10
Malware Config
Targets
-
- Target 2045ecc425209bfc5e090d868856afe74cf0cb13dc63f8a00b656aac3fe438ea
- Size 1.7MB
- SHA256 2045ecc425209bfc5e090d868856afe74cf0cb13dc63f8a00b656aac3fe438ea
Score10/10Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Bazar/Team9 Loader payload
Blocklisted process makes network request
Loads dropped DLL