Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220331-en -
submitted
11-04-2022 02:47
Static task
static1
Behavioral task
behavioral1
Sample
9316151281933378940113971c5537a5bb8f95db2ebfb9ffefad3dbdecb3fdde.dll
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
9316151281933378940113971c5537a5bb8f95db2ebfb9ffefad3dbdecb3fdde.dll
Resource
win10v2004-20220331-en
General
-
Target
9316151281933378940113971c5537a5bb8f95db2ebfb9ffefad3dbdecb3fdde.dll
-
Size
711KB
-
MD5
58a05ac00c48837f62ba94a700106f0f
-
SHA1
5e0b655b35ac7a997df7c6c885daa9099d4058a6
-
SHA256
9316151281933378940113971c5537a5bb8f95db2ebfb9ffefad3dbdecb3fdde
-
SHA512
faddfea12218981589c5965488e278358efc31463a98df4daa2fb4b7d9ae369401079310831f5fea794fe261310954186c354ca05fedab9161895e1510561544
Malware Config
Extracted
bazarloader
reddew28c.bazar
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 1 IoCs
Processes:
resource yara_rule behavioral2/memory/4808-124-0x000001DEBE5A0000-0x000001DEBE5CB000-memory.dmp BazarLoaderVar6