Analysis
-
max time kernel
129s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30-12-2023 10:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1545af58b3604f5c7de3637cb9dcf0ae.dll
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1545af58b3604f5c7de3637cb9dcf0ae.dll
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
1545af58b3604f5c7de3637cb9dcf0ae.dll
-
Size
1.2MB
-
MD5
1545af58b3604f5c7de3637cb9dcf0ae
-
SHA1
9478b60e350b6daa24e3c090bc6d8509b6c1e175
-
SHA256
39714091157b9bd35a22d66f3ba9cd6269eae468421e00202edae55259e96813
-
SHA512
a7a861c504729eecdb5d8a245a0e34fe35a6a631e525bd44d91bd18e8ccd7da08f802245f1b87b25809f3e544db428de15f112572fa362980133c9b02c948bb5
-
SSDEEP
24576:rUxgsS42vw6iULwu+JNfO64ipiZGJAUrwx/KKSK:4xjevw6iU8u+NfmXMutxixK
Score
10/10
Malware Config
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 2 IoCs
Processes:
resource yara_rule behavioral1/memory/2636-0-0x0000000000120000-0x0000000000145000-memory.dmp BazarLoaderVar6 behavioral1/memory/2636-1-0x0000000000120000-0x0000000000145000-memory.dmp BazarLoaderVar6