Overview

overview

10

Static

static

05419e0d45...ac.dll

windows7_x64

10

05419e0d45...ac.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05419e0d4556b668e02bf2c6637c782eaca8b30fdcd5a2ffd6e1bf756fcecbac

  • Size

    459KB

  • Sample

    220411-e3mtashehp

  • MD5

    217b818bb72e6ada3aa32c1aa39f5707

  • SHA1

    53ccef9fe8d41650ba59496d4376c0e0d29ea37d

  • SHA256

    d3371302d8e3a505c7eb737533c2827d6d4853298d4e7c018f81e9057a819ef2

  • SHA512

    33c4ff482e7b757e6fe585139b9fedb1eb502126437f623f207425d8b1d0dcf4652a307a3dd8f7b221303daadb78fee558fc4848037f3ebe30d9921241ffc570

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      05419e0d4556b668e02bf2c6637c782eaca8b30fdcd5a2ffd6e1bf756fcecbac

    • Size

      710KB

    • MD5

      6ccbebdcc12c932f16b1bd897574426e

    • SHA1

      048fa5ea11b462ff8205c04bc6e01c374a6452ce

    • SHA256

      05419e0d4556b668e02bf2c6637c782eaca8b30fdcd5a2ffd6e1bf756fcecbac

    • SHA512

      36ea847e9e0f4fe25a71a8ba02f2b631293a81c70b96fbde7640a878717981be9591cd514c1586cb1cbb944d32fceefd165cc404de34d8b1e7c67fadf0b177cf

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks