General
-
Target
https://archive.org/download/pizza-tower-september-25th-2021-rework-1.1-playtest-build/Pizza%20Tower%20September%2025th%2C%202021%20%28Rework%201.1%29%20Playtest%20build.zip
-
Sample
230407-a8zmtsfg94
Score
10/10
Malware Config
Targets
-
-
Target
https://archive.org/download/pizza-tower-september-25th-2021-rework-1.1-playtest-build/Pizza%20Tower%20September%2025th%2C%202021%20%28Rework%201.1%29%20Playtest%20build.zip
Score10/10-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-