bazarloader | b7964c375e6cc67e422a44ed168646cff5e76ba832466cbcc0cfc393816f8ea4 | Triage™

Analysis

max time kernel
78s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-en-20220112
submitted
26/02/2022, 08:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3aa5a3ec0616aca262bbd97b0f2cd797.dll
Size 710KB
Sample220226-kb5spabddp
SHA256 b7964c375e6cc67e422a44ed168646cff5e76ba832466cbcc0cfc393816f8ea4
MD5 3aa5a3ec0616aca262bbd97b0f2cd797
SHA1 10c04e208dee712a14dfa80bfa3c3c4026ef9afd
SHA512 b540739e3f43427c2ef125c02e4d573d1dcdd0e50f3eb80d7bde735893ea09e708627c975408c7932af14db878162025df32c12520fc1218cb103cf6c79ba517
MD5 SHA1 SHA512

Score

10^/10

bazarloader dropper loader

Malware Config

Signatures

Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
loader dropper bazarloader

Bazar/Team9 Loader payload 1 IoCs

resource	yara_rule
behavioral2/memory/2560-130-0x0000014DBA320000-0x0000014DBA34B000-memory.dmp	BazarLoaderVar6

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3aa5a3ec0616aca262bbd97b0f2cd797.dll,#1
1⤵
PID:2560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2560-130-0x0000014DBA320000-0x0000014DBA34B000-memory.dmp

Download