Overview

overview

10

Static

static

10

1548-54-0x...ry.dll

windows7_x64

1

1548-54-0x...ry.dll

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1548-54-0x0000000000110000-0x000000000013B000-memory.dmp

  • Size

    172KB

  • MD5

    ff4398505b68277d3d7092c0e2f33bb9

  • SHA1

    eb7bbc41bcf6800ee77b22b80077f350013aea26

  • SHA256

    d54ca5d69f75148db03262a4073bbec5b0192d0f049e2a4e3e6d6ef15de197bc

  • SHA512

    8ae120c14c7b0c50fc675d7f6304a8df7e5aa9a182fd374cfdb857ed59acb1dfae654caf3db0aafdda932f406fbe42df21628e2b201d55eb3be69efa27175651

  • SSDEEP

    3072:EEio4TLBJnpnCeQqSMByXrIslryUMgZoN59iiLFzi1o7gIUAlG15s:E/oebpnCR7ioaE

Score
10/10
bazarloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Signatures

  • Bazar/Team9 Loader payload 1 IoCs
  • Bazarloader family
    bazarloader

Files

  • 1548-54-0x0000000000110000-0x000000000013B000-memory.dmp
    .dll windows x64


    Code Sign

    Headers

    Sections