Overview

overview

10

Static

static

3

bee3b67d32...e2.dll

windows7-x64

10

bee3b67d32...e2.dll

windows10-2004-x64

10

Analysis

  • max time kernel
    92s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-12-2023 13:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bee3b67d328996dbfe331a3fce8085e2.dll

  • Size

    536KB

  • MD5

    bee3b67d328996dbfe331a3fce8085e2

  • SHA1

    b801ee0390fd7ea0aa27b8998202a83034fc522e

  • SHA256

    95dfe0ca0c4fe511a79a215b0df53c992c443aca8c80c20a6f9f05cdf2afe393

  • SHA512

    8ecf39ffda508666c49e8b0e9ab27124643404e70674c8b0c619c7f8ea113cd1b9da3dde49b2074b7b975706baeb499f5db72fc56ffd37f95ef68db963e7b08a

  • SSDEEP

    12288:qyE/Dq1dASUv5CiSp0en4JgotvHXxiHvfYiqV4t0q:qX/+AUiSp0y4JgMpiHXoSt0q

Score
10/10
bazarloaderdropperloader

Malware Config

Signatures

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader
  • Bazar/Team9 Loader payload 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\bee3b67d328996dbfe331a3fce8085e2.dll,#1
    1⤵
      PID:800

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/800-0-0x0000027C8D3D0000-0x0000027C8D3FA000-memory.dmp
      Filesize

      168KB

      Download
    • memory/800-1-0x0000027C8D3D0000-0x0000027C8D3FA000-memory.dmp
      Filesize

      168KB

      Download