Overview

overview

10

Static

static

a521dfc3b1...e5.dll

windows7_x64

10

a521dfc3b1...e5.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a521dfc3b19fd905185eb4cb1fc91035eaa8f562671e4007edec4b46bf22dae5

  • Size

    460KB

  • Sample

    220411-b5enxsaec2

  • MD5

    b6612fe79d997f6497e74190aa705fcb

  • SHA1

    aeb15179606303db6c491313f734a4532ed6ce92

  • SHA256

    196876de01405d60a2f2c0bc16734fdca36a716e8a45fdff8b7539369ba7e9c8

  • SHA512

    69ebf7c8e35114d853f141823afbdc3021183011142ceaa96165964fb9cb9ed1541014861aba1ec8aafd05899b249f1ba9403f3f832ce22973c137b680b88663

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      a521dfc3b19fd905185eb4cb1fc91035eaa8f562671e4007edec4b46bf22dae5

    • Size

      711KB

    • MD5

      badc3c610326f3da319b2ce0b008451f

    • SHA1

      fce11c935b788f45ed239a090e972ea9f841bc6b

    • SHA256

      a521dfc3b19fd905185eb4cb1fc91035eaa8f562671e4007edec4b46bf22dae5

    • SHA512

      6f6bd05d27890f58b3884bd9d081a13c69a3389948e0671e7a7eff207704c7faea6d253539c9abd8040fef9c4832cc34519b95590bf3414c95e2a0410e1d6d9a

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks