General

  • Target

    1204-54-0x0000000000190000-0x00000000001BB000-memory.dmp

  • Size

    172KB

  • MD5

    30547c722f14e75d9ce8b6f2344e0427

  • SHA1

    d85f90dc2ac09124042b179800f50609f4d07d21

  • SHA256

    59100f22310f61e8229cff871f7182ce3e963259b580096ba8b5f7e4ba3f3f2f

  • SHA512

    3fad0ecd10e2d7f999c1b9ecf164e116e7f3c92c35d02a4c187750cf472774dcd52065f2c3a1da8697f78c1d0a1e5dac5845a50a370ff3dbf14e42be79827e8d

  • SSDEEP

    3072:EEio4TLBJnpnCeQqSMByXrIslryUMgZoN59iiLFzi1o7gIUAlG1O:E/oebpnCR7ioaE

Score
10/10

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Signatures

  • Bazar/Team9 Loader payload 1 IoCs
  • Bazarloader family

Files

  • 1204-54-0x0000000000190000-0x00000000001BB000-memory.dmp
    .dll windows x64


    Headers

    Sections