Overview

overview

10

Static

static

3e497c6123...d8.dll

windows7_x64

10

3e497c6123...d8.dll

windows10-2004_x64

10

Analysis

  • max time kernel
    61s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    22-03-2022 20:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3e497c6123e2ce45a4c485d8600c05847f5788cd7e9004825a89467ff4e739d8.dll

  • Size

    710KB

  • MD5

    c2535ba10f0e14cf6144f22295b02d3a

  • SHA1

    a4dc4ce27b70530d5006b20641e9d18738a7f4bc

  • SHA256

    3e497c6123e2ce45a4c485d8600c05847f5788cd7e9004825a89467ff4e739d8

  • SHA512

    c9ce2d3a7360a86d24c5a65e18f148a3d54006e3d4c6bac480391468ffe694143aa4057ee649109e502ec764713ce0c98dfefacc0cffb769cde612d66b6b06c5

Score
10/10
bazarloaderdropperloader

Malware Config

Signatures

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader
  • Bazar/Team9 Loader payload 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\3e497c6123e2ce45a4c485d8600c05847f5788cd7e9004825a89467ff4e739d8.dll,#1
    1⤵
      PID:1492

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1492-130-0x0000020FAD6A0000-0x0000020FAD6CB000-memory.dmp
      Filesize

      172KB

      Download