Analysis
-
max time kernel
118s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
31-12-2023 03:25
General
-
Target
264ee2148fd34018ee969a40fb148713.dll
-
Size
1.0MB
-
MD5
264ee2148fd34018ee969a40fb148713
-
SHA1
d61ea7427e45ebbe4d66c19811a3afe188ed1aa6
-
SHA256
2d1d9fe54857b61b2778926a9aca6b40ccccb9150fe5a024d7809786f07ca715
-
SHA512
4b5facfe88ca135b85018a0f369edff882e406daabd1f0388f60d3080ac4d7d5c6eaed06de52b9780589ec07da89b0f3264cd100d3b60bfe75f9af3e6718a754
-
SSDEEP
12288:9fHnu1hxBOwTdG7MDsDbQg779SweGIvdZOyjGU+G0VCspXMl3A6Gnzq9PBa8nTM:pHK3OwTd8MQDbQgHgUIv1jGUXuCs9qs
Score
10/10
Malware Config
Extracted
Family
bazarloader
C2
104.248.170.50
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 4 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\264ee2148fd34018ee969a40fb148713.dll1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\264ee2148fd34018ee969a40fb148713.dll,DllRegisterServer {4F06E868-286F-4461-A989-61CAB0704094}1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
156KB
-
Filesize
156KB
-
Filesize
156KB
-
Filesize
156KB