Analysis
-
max time kernel
42s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220331-en -
submitted
04-04-2022 14:32
Static task
static1
Behavioral task
behavioral1
Sample
2d2a0d761f1755b1ce1a06bc75dab24b5b65d684946842784b2e07451a30e8d8.dll
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
2d2a0d761f1755b1ce1a06bc75dab24b5b65d684946842784b2e07451a30e8d8.dll
Resource
win10v2004-20220331-en
General
-
Target
2d2a0d761f1755b1ce1a06bc75dab24b5b65d684946842784b2e07451a30e8d8.dll
-
Size
711KB
-
MD5
0cdf6b2c0c9af0523d556e443223fa59
-
SHA1
dde5a3f78ee1fb88f8f5f8b26853ea4cce764193
-
SHA256
2d2a0d761f1755b1ce1a06bc75dab24b5b65d684946842784b2e07451a30e8d8
-
SHA512
02fae2cb1089c3b8b534982de89f94707acbaa65c3f6f1a5cb8d01e9cd9da8255e4b3909c5210bf028d13210c4378cf7b1272c88b1e3560938a9e635ee623836
Malware Config
Extracted
bazarloader
reddew28c.bazar
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 1 IoCs
Processes:
resource yara_rule behavioral1/memory/1508-54-0x0000000000520000-0x000000000054B000-memory.dmp BazarLoaderVar6
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1508-54-0x0000000000520000-0x000000000054B000-memory.dmpFilesize
172KB