Overview

overview

10

Static

static

2ecb7f64c7...4b.dll

windows7_x64

10

2ecb7f64c7...4b.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ecb7f64c75053239e5ded8ad8485c2dc8893b145822271d6902a7948d70aa4b

  • Size

    710KB

  • Sample

    220604-rmsqtsagf5

  • MD5

    0fd810942ae8887e6944ea662c77bdd0

  • SHA1

    29e67f1842981dc2e9999fdb746400dbc7beeb4e

  • SHA256

    2ecb7f64c75053239e5ded8ad8485c2dc8893b145822271d6902a7948d70aa4b

  • SHA512

    71156aa6cd806c0356da16e0e8847959c9494e8af5485af16de7f0c37ba106b84ca7915fb7454167a34a7e7fae25b4bc4c53779c65ab72b270d011416718be35

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      2ecb7f64c75053239e5ded8ad8485c2dc8893b145822271d6902a7948d70aa4b

    • Size

      710KB

    • MD5

      0fd810942ae8887e6944ea662c77bdd0

    • SHA1

      29e67f1842981dc2e9999fdb746400dbc7beeb4e

    • SHA256

      2ecb7f64c75053239e5ded8ad8485c2dc8893b145822271d6902a7948d70aa4b

    • SHA512

      71156aa6cd806c0356da16e0e8847959c9494e8af5485af16de7f0c37ba106b84ca7915fb7454167a34a7e7fae25b4bc4c53779c65ab72b270d011416718be35

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks