Overview

overview

10

Static

static

812fff0f66...44.dll

windows7_x64

10

812fff0f66...44.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    812fff0f66fe7d06c2af1398458210b4079765752443b11dd3494d3c3c299544

  • Size

    460KB

  • Sample

    220411-c5gzqabaf8

  • MD5

    f699e7f947448929a006da65421921e2

  • SHA1

    5a43408d035d1e75a22f785eaca3d70fe8dfc811

  • SHA256

    8396936f4c8f3451241261fa909139a02cbfdefdfe847b5bb8e725ad348d6f36

  • SHA512

    91dcd0a7200d53425c5b6f08f18f0dace3d85b497eb27002cb41f6561dedfcb516e4ff322471d47e03785f0552da346c7669b07a59b1329b68040fa9fa460219

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      812fff0f66fe7d06c2af1398458210b4079765752443b11dd3494d3c3c299544

    • Size

      711KB

    • MD5

      5c940b10f675bdc090ded93532cc09a5

    • SHA1

      6c8ddb667ad5cd1c36c0ba0376e27de12750752e

    • SHA256

      812fff0f66fe7d06c2af1398458210b4079765752443b11dd3494d3c3c299544

    • SHA512

      85b6853567092a7fa623e363792819668d8cfbc08dd79fd16f119bbcfdbb203e32efdbb964170d292631cd5c903074b591c38915e3107fe51c5b8a553625d821

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks