Analysis
- max time kernel
111s - max time network
126s - platform
windows10_x64 - resource
win10-en-20211208 - submitted
28/01/2022, 13:18
Static task
static1
Behavioral task
behavioral1
Sample
993c4b6271f2428f183ebbfa238512cceef51f722669b22ee86ea1517147272c.dll
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
993c4b6271f2428f183ebbfa238512cceef51f722669b22ee86ea1517147272c.dll
Resource
win10-en-20211208
0 signatures
0 seconds
General
- Target 993c4b6271f2428f183ebbfa238512cceef51f722669b22ee86ea1517147272c.dll
- Size 601KB
- Sample220128-qkalssdber
- SHA256 993c4b6271f2428f183ebbfa238512cceef51f722669b22ee86ea1517147272c
- MD5 6ea53e4c32c325f683e8aac731d70f6f
- SHA1 84c0730c7ef480845bbb62e7c7e544644375a5ae
- SHA512 c365ea8622661b970f588f0297d251642288104a6838af921c5f1467864293791e3c719a54b34a96f094d8faa67272a8ea80d8b30553c7d45d55bde2407bf191
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
- Bazar/Team9 Loader payload 1 IoCs
resource yara_rule behavioral2/memory/3712-118-0x0000000180000000-0x000000018002E000-memory.dmp BazarLoaderVar5