Overview

overview

10

Static

static

05419e0d45...ac.dll

windows7_x64

10

05419e0d45...ac.dll

windows10-2004_x64

10

Analysis

  • max time kernel
    43s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220331-en
  • submitted
    11-04-2022 04:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    05419e0d4556b668e02bf2c6637c782eaca8b30fdcd5a2ffd6e1bf756fcecbac.dll

  • Size

    710KB

  • MD5

    6ccbebdcc12c932f16b1bd897574426e

  • SHA1

    048fa5ea11b462ff8205c04bc6e01c374a6452ce

  • SHA256

    05419e0d4556b668e02bf2c6637c782eaca8b30fdcd5a2ffd6e1bf756fcecbac

  • SHA512

    36ea847e9e0f4fe25a71a8ba02f2b631293a81c70b96fbde7640a878717981be9591cd514c1586cb1cbb944d32fceefd165cc404de34d8b1e7c67fadf0b177cf

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Signatures

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader
  • Bazar/Team9 Loader payload 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\05419e0d4556b668e02bf2c6637c782eaca8b30fdcd5a2ffd6e1bf756fcecbac.dll,#1
    1⤵
      PID:360

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/360-54-0x0000000000120000-0x000000000014B000-memory.dmp
      Filesize

      172KB

      Download