Overview

overview

10

Static

static

cd8c6dcf79...f0.dll

windows7_x64

10

cd8c6dcf79...f0.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd8c6dcf792f0677ca7c8f821c88b6938c38f709c096096ff1babfa504b39cf0

  • Size

    460KB

  • Sample

    220330-h2y2qahgh7

  • MD5

    873b1479f53c99f3edd8d31e9c6ebc55

  • SHA1

    e2bf8e0af107f0ce0bfb1c2180b37fe5f04238fe

  • SHA256

    82a8df3ffd979fb159bf88ba6f17ae736d9b4d6a5f7f4d0722ccdc23b93677f0

  • SHA512

    291d4fcab4c4266cc0fe5f5966510d3edb929334775785715e3397c44157a8a578afa0087305e4e6fbb666407cf0f915ba3ce112e900ddbf376672c0dd19fb00

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      cd8c6dcf792f0677ca7c8f821c88b6938c38f709c096096ff1babfa504b39cf0

    • Size

      711KB

    • MD5

      fa51cc2f2325505d225cea202e2ea405

    • SHA1

      f27f9ee5ad9b48dbcfe5750d2b304eda0ff72024

    • SHA256

      cd8c6dcf792f0677ca7c8f821c88b6938c38f709c096096ff1babfa504b39cf0

    • SHA512

      9abe97ff4723d07a7a8bc15ed22840f7a358ba74d855822c3b34b28a3987a5ca163a623742ef5fccdfb2dba109c2a4edee74830fa3e8dcca3a0218dd2b0becae

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks