General
-
Target
0ff506dc51126a4c89c4a8e435b09f2a6e0811df95b922898ccbe8c9ac7f2706
-
Size
266KB
-
Sample
220320-dc6ytafehq
-
MD5
8a04926cc8b9bb02b39a24133445a1cd
-
SHA1
89b08d47b58000b4124e89160acb44115368c377
-
SHA256
0ff506dc51126a4c89c4a8e435b09f2a6e0811df95b922898ccbe8c9ac7f2706
-
SHA512
63b3c61719b7fadea5f3eccc1dca87825b8d1d74a14f01fc39d50c6690842f3c1e24f334e9110b720c6e32db21f46daae5514d77d8221961bde5146a302acfac
Static task
static1
Behavioral task
behavioral1
Sample
0ff506dc51126a4c89c4a8e435b09f2a6e0811df95b922898ccbe8c9ac7f2706.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
0ff506dc51126a4c89c4a8e435b09f2a6e0811df95b922898ccbe8c9ac7f2706.exe
Resource
win10v2004-20220310-en
Malware Config
Extracted
bazarloader
54.193.186.118
13.57.15.8
Targets
-
-
Target
0ff506dc51126a4c89c4a8e435b09f2a6e0811df95b922898ccbe8c9ac7f2706
-
Size
266KB
-
MD5
8a04926cc8b9bb02b39a24133445a1cd
-
SHA1
89b08d47b58000b4124e89160acb44115368c377
-
SHA256
0ff506dc51126a4c89c4a8e435b09f2a6e0811df95b922898ccbe8c9ac7f2706
-
SHA512
63b3c61719b7fadea5f3eccc1dca87825b8d1d74a14f01fc39d50c6690842f3c1e24f334e9110b720c6e32db21f46daae5514d77d8221961bde5146a302acfac
Score10/10-
Bazar/Team9 Loader payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-