Analysis
-
max time kernel
42s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220331-en -
submitted
11-04-2022 01:43
Static task
static1
Behavioral task
behavioral1
Sample
a521dfc3b19fd905185eb4cb1fc91035eaa8f562671e4007edec4b46bf22dae5.dll
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
a521dfc3b19fd905185eb4cb1fc91035eaa8f562671e4007edec4b46bf22dae5.dll
Resource
win10v2004-20220331-en
General
-
Target
a521dfc3b19fd905185eb4cb1fc91035eaa8f562671e4007edec4b46bf22dae5.dll
-
Size
711KB
-
MD5
badc3c610326f3da319b2ce0b008451f
-
SHA1
fce11c935b788f45ed239a090e972ea9f841bc6b
-
SHA256
a521dfc3b19fd905185eb4cb1fc91035eaa8f562671e4007edec4b46bf22dae5
-
SHA512
6f6bd05d27890f58b3884bd9d081a13c69a3389948e0671e7a7eff207704c7faea6d253539c9abd8040fef9c4832cc34519b95590bf3414c95e2a0410e1d6d9a
Malware Config
Extracted
bazarloader
reddew28c.bazar
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 1 IoCs
Processes:
resource yara_rule behavioral1/memory/288-54-0x0000000000230000-0x000000000025B000-memory.dmp BazarLoaderVar6
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/288-54-0x0000000000230000-0x000000000025B000-memory.dmpFilesize
172KB