Overview

overview

10

Static

static

10

948-54-0x0...ry.dll

windows7_x64

1

948-54-0x0...ry.dll

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    948-54-0x00000000001A0000-0x00000000001CB000-memory.dmp

  • Size

    172KB

  • MD5

    36a4b558a10f82f71d1ade5cea0997b7

  • SHA1

    c7228b2ead49cbf46293f5d462cd5163a8fa03be

  • SHA256

    cc7fbdf9345704aa7cd3788ca3e59b590c7b809d26db1b0fe51bd8b2e36b63ad

  • SHA512

    6bdeb3d38b4c72d7266696891adab93c814aacf2d82490f6d2c50f09333c9cbe8d6cb0ac6e498aa739b06c080cc7702a9161e6b96bb917636ba6d54e03ab7d76

Score
10/10
bazarloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Signatures

  • Bazar/Team9 Loader payload 1 IoCs
  • Bazarloader family
    bazarloader

Files

  • 948-54-0x00000000001A0000-0x00000000001CB000-memory.dmp
    .dll windows x64


    Code Sign

    Headers

    Sections