Overview

overview

10

Static

static

ed067c8f3f...88.dll

windows7_x64

10

ed067c8f3f...88.dll

windows10-2004_x64

10

Analysis

  • max time kernel
    129s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    16-03-2022 18:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ed067c8f3f6db4624c4bcf2433a8bb1d423fba015216fd2a1558daef33346888.dll

  • Size

    711KB

  • MD5

    7cdc8904ccbe02e4a55f51ca0c27a892

  • SHA1

    044633ba0242828efa0560b1cc9f090b2df957e4

  • SHA256

    ed067c8f3f6db4624c4bcf2433a8bb1d423fba015216fd2a1558daef33346888

  • SHA512

    285fea3f1b4721adccddc4c094c667ef1dcae61a7ea6f34efc838ea7a3fa25c6a311a850e4c2ee79e7df4a9a8e49ce6ead71878e68bfaadd6df3640f67e8f9e3

Score
10/10
bazarloaderdropperloader

Malware Config

Signatures

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader
  • Bazar/Team9 Loader payload 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ed067c8f3f6db4624c4bcf2433a8bb1d423fba015216fd2a1558daef33346888.dll,#1
    1⤵
      PID:1492

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1492-130-0x00000210825C0000-0x00000210825EB000-memory.dmp
      Filesize

      172KB

      Download