Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
- submitted
08/01/2024, 06:38
General
- Target 4ab40b0b0e2bdbe2aa582f417cead251.dll
- Size 1.0MB
- Sample240108-hd943scgfl
- SHA256 fc6071f0f115474d30e5a278f2199bb55c6a1f0929c796d0c770d8e724aefcaa
Score
10/10
Malware Config
Signatures
- Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
- Bazar/Team9 Loader payload 6 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\4ab40b0b0e2bdbe2aa582f417cead251.dll,#11⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\4ab40b0b0e2bdbe2aa582f417cead251.dll,#1 13617162391⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3948-1-0x0000026BFE5F0000-0x0000026BFE604000-memory.dmp
memory/3948-3-0x0000026BFE5F0000-0x0000026BFE604000-memory.dmp
memory/3948-2-0x00007FFEA8C00000-0x00007FFEA8D5A000-memory.dmp
memory/5088-0-0x000002EC70490000-0x000002EC704A4000-memory.dmp
memory/5088-4-0x00007FFEA8C00000-0x00007FFEA8D5A000-memory.dmp
memory/5088-6-0x000002EC70490000-0x000002EC704A4000-memory.dmp