Overview

overview

10

Static

static

3

6e2316bb2c...48.dll

windows7-x64

10

6e2316bb2c...48.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e2316bb2c6cb9c5e3c26398574e5548

  • Size

    512KB

  • Sample

    231219-wc44bsgbfq

  • MD5

    6e2316bb2c6cb9c5e3c26398574e5548

  • SHA1

    81be2c346afec4bc248f6332bcb287b3bb6ea547

  • SHA256

    016a36baa939016b069f379a632769eca6e77639543283583b1d5b675065279f

  • SHA512

    c8efe49ab78db3f9e7e246ecd3624d91d16f076409414181a006e336640fc9b388acc8252a462241ca52afd6bc8265036fb40eff8e631c2f347af2389b821455

  • SSDEEP

    6144:h8Hn6uhrFveAYc4653HZBM+knvzHHAg7Toh0QFFo3JpWPwM6mRolwzpSjeIUOe+N:h8BvjYc4cJCbHHZojuvXjZDeXGyK

Score
10/10
bazarloaderdropperloader

Malware Config

Extracted

Family

bazarloader

C2

reddew28c.bazar

Targets

    • Target

      6e2316bb2c6cb9c5e3c26398574e5548

    • Size

      512KB

    • MD5

      6e2316bb2c6cb9c5e3c26398574e5548

    • SHA1

      81be2c346afec4bc248f6332bcb287b3bb6ea547

    • SHA256

      016a36baa939016b069f379a632769eca6e77639543283583b1d5b675065279f

    • SHA512

      c8efe49ab78db3f9e7e246ecd3624d91d16f076409414181a006e336640fc9b388acc8252a462241ca52afd6bc8265036fb40eff8e631c2f347af2389b821455

    • SSDEEP

      6144:h8Hn6uhrFveAYc4653HZBM+knvzHHAg7Toh0QFFo3JpWPwM6mRolwzpSjeIUOe+N:h8BvjYc4cJCbHHZojuvXjZDeXGyK

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks