Overview

overview

10

Static

static

6636b60011...f2.dll

windows7_x64

10

6636b60011...f2.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6636b60011ed2cd2252f2807938c3f35561d08a0d1a93fe46154a6932e288ef2

  • Size

    459KB

  • Sample

    220330-e9eq9sgbf4

  • MD5

    462be9d0e083a83959c040c0c30c51c1

  • SHA1

    5e1d8e8849932b0d1f18c7d4e919a9aff11592ad

  • SHA256

    e65deb1c3762a3cfe526ed95653a352cebe96a621e95e23b5eaf2bc2b454b2e7

  • SHA512

    a56aeaf8a849e7028e0f063819ab7d6c8f574b6f576d9dcc5415ee34990dbe9350c18d3c6e91b89f391e2058e41c877ab76bae68d477fe0a25c9d846c60145aa

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      6636b60011ed2cd2252f2807938c3f35561d08a0d1a93fe46154a6932e288ef2

    • Size

      710KB

    • MD5

      42fb1da17cf2cf629e6479435248f628

    • SHA1

      4522761de7b60201c93bdc2734ee5a3cb19f3e9d

    • SHA256

      6636b60011ed2cd2252f2807938c3f35561d08a0d1a93fe46154a6932e288ef2

    • SHA512

      5fab151affb93ebbff1319a1f8eb7e4f89cfbf851a4c97d69ac30da1c9b5022858707a62aec09055dba0e4adf0d3da8513831f58e3a95891ce068594133b655c

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks