Overview

overview

10

Static

static

4307ca821d...64.dll

windows7_x64

10

4307ca821d...64.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4307ca821d8f15f782955bdbe4740021720fd61832f174f9d06ee9e22e27bb64

  • Size

    460KB

  • Sample

    220404-jh1lwaggcl

  • MD5

    3e2a267436da9814457f7be6f308a8dd

  • SHA1

    ea0a15d530d0f2a022d66286943153603b6a4d89

  • SHA256

    4d8d1e8674a8591e3fde534d91502dce451b573b3fe5c91a3e5ff0bea374d8a1

  • SHA512

    b81f8d79b1f7b93e3799aa65733748c941a6aa7881b5fc065227a1f485966dfc772279bcf9982ecc1e5d3d0572164020ffc4b349978cb8bf516565f1c1cb7433

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      4307ca821d8f15f782955bdbe4740021720fd61832f174f9d06ee9e22e27bb64

    • Size

      712KB

    • MD5

      30b62d95ce73f71d66569da1f5efa085

    • SHA1

      6bcc28b7bd2dfbd18c96c4d7ea4f3ce878fd1e03

    • SHA256

      4307ca821d8f15f782955bdbe4740021720fd61832f174f9d06ee9e22e27bb64

    • SHA512

      174afecbc2f1d10dddab3f95e2855cdba040962f8db28d687372c2209724da45c6d4ef3e65608e8a730321e7effb3e39f1d823886a082c3c7b7a3c9a9d34fb65

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks