Overview

overview

10

Static

static

f4a3a44514...3e.dll

windows7_x64

10

f4a3a44514...3e.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4a3a445146a23e58331d5f6427070283cff1c0439a34cb15a6b172f0657563e

  • Size

    460KB

  • Sample

    220404-awkm5sbcfm

  • MD5

    8076c48f5d032fbf4a3614cf73c8c503

  • SHA1

    18087d646b79b0967ac262fe4904bee4dea51ca7

  • SHA256

    19b417517a2830bac4cdff8a07dbc61be1a8d88b0d8d5da5a640bbdc755b37d4

  • SHA512

    e8f4adb3c1a24e03defa91d4d3e70f62d487b9ec56bdfd2a21a8e4f54d665af2a2498c38e0c1a092ab666a416a0b82fef39a4a001e7f2d63ec8575a3b9633dd2

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      f4a3a445146a23e58331d5f6427070283cff1c0439a34cb15a6b172f0657563e

    • Size

      711KB

    • MD5

      e30d680751d8931d86e9dda3c1ac43fb

    • SHA1

      14f830d579507adf88e4d912b45705726b75b0a3

    • SHA256

      f4a3a445146a23e58331d5f6427070283cff1c0439a34cb15a6b172f0657563e

    • SHA512

      33cfdac113e3629ce311cf87f91fc42e4f27bf7cd046a655c5d78dafcec50ab8085e95ff96a0ac36f40c8e2614246a003524d79497a9a48f6a9510bb645254b5

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks