Overview

overview

10

Static

static

2d2a0d761f...d8.dll

windows7_x64

10

2d2a0d761f...d8.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d2a0d761f1755b1ce1a06bc75dab24b5b65d684946842784b2e07451a30e8d8

  • Size

    460KB

  • Sample

    220404-rwgpxsbchj

  • MD5

    a2a7f51cf1f930b8851553880bb8ee4b

  • SHA1

    d2b2c321c81661b7af975da9abc232231c176c27

  • SHA256

    fe442adfa27bea1b29b31d25f440ee5cfec6d146679806161886f54588b6b737

  • SHA512

    c15c2fe9d5d3f3f147c887b10a6a91d9ef3651b4a511e87fdc88baf3bee264d3caae71e49787b241e69b35a07dd0c29bb716071ba65edbcc14e7187da274154d

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      2d2a0d761f1755b1ce1a06bc75dab24b5b65d684946842784b2e07451a30e8d8

    • Size

      711KB

    • MD5

      0cdf6b2c0c9af0523d556e443223fa59

    • SHA1

      dde5a3f78ee1fb88f8f5f8b26853ea4cce764193

    • SHA256

      2d2a0d761f1755b1ce1a06bc75dab24b5b65d684946842784b2e07451a30e8d8

    • SHA512

      02fae2cb1089c3b8b534982de89f94707acbaa65c3f6f1a5cb8d01e9cd9da8255e4b3909c5210bf028d13210c4378cf7b1272c88b1e3560938a9e635ee623836

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks