Overview

overview

10

Static

static

618c6b802d...fd.dll

windows7_x64

10

618c6b802d...fd.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    618c6b802daca2f371c73458fd7d931f8c8f69f4291765965c64748e7f5347fd

  • Size

    460KB

  • Sample

    220404-jakkpagfhn

  • MD5

    05b922b7fb2ca144e4c23fe68853de8b

  • SHA1

    48b3b97d189554db018f6306e083d815c9660065

  • SHA256

    48e70b7505c4161c944327eb1bb27a1258f66eb3866eab0cc53936d7fe1ef419

  • SHA512

    209fb2ac1adcbad639ce1b9f6f298a53ec61ef1c4f17c2a1054e4f01bde51df628d9ccaff3e050e5bece2375fb8a84075957f26e2c87964c4d82fc1318dcb56d

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      618c6b802daca2f371c73458fd7d931f8c8f69f4291765965c64748e7f5347fd

    • Size

      711KB

    • MD5

      55ad28c22fe29d2387a24577fab6966e

    • SHA1

      460aee79633d71653f29f8623378a134571b6d7f

    • SHA256

      618c6b802daca2f371c73458fd7d931f8c8f69f4291765965c64748e7f5347fd

    • SHA512

      a57598e43ae5086d84198c24b0dace06fecb90f1b0a30e1aaf0b569ccf5bed7e57e2e1f963060802e7c6ff0a11e2b8c16ac3462daca4ab8b57c8350d178182f8

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks