Overview

overview

10

Static

static

330687b612...90.dll

windows7_x64

10

330687b612...90.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    330687b61260b1b24d312326f7ddaa94615a44b30d70fd2097b3f528cff2cc90

  • Size

    460KB

  • Sample

    220404-kp8rhadbd9

  • MD5

    7be33edfafac2a82f919d798e4d63c99

  • SHA1

    668508d01b4f271712233a5e161d66fea4c1fa79

  • SHA256

    9e4a9dba781594eb6243c78faa0481bf5f010dac8e8e361a4af15acc7aa0e1bd

  • SHA512

    78659a7bd73fe80a6e24f576b5330194e78ed4439189f1bf1df874eab1bd8413a0f1f037d1f5bd07bf05f62471b58dde748afd0c22a5171b3cc8a3ecd2876ac7

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      330687b61260b1b24d312326f7ddaa94615a44b30d70fd2097b3f528cff2cc90

    • Size

      711KB

    • MD5

      39ef34583a748fe01cd44ee536eb84f7

    • SHA1

      726279282da698ab06f1ecdef65c6d1a3f2eee34

    • SHA256

      330687b61260b1b24d312326f7ddaa94615a44b30d70fd2097b3f528cff2cc90

    • SHA512

      e340fe1b642f8a1e521b914b37bf64402e0c3922fd83bf51c461077f38e238177be9e9f5360c8437910168c2488fa715a7d93d752ba9d70ac8ccfbd00729c2c8

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks