Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
30-01-2024 04:59
General
-
Target
8186ddfa67159cae9dc6bbe64b76eb2e.dll
-
Size
956KB
-
MD5
8186ddfa67159cae9dc6bbe64b76eb2e
-
SHA1
0a3f868cec4f16531adee05620ca9868e94e8538
-
SHA256
1bdb149fc19797341b0dd34325951eb0fd1451ff4245908db5a35cb134ad280f
-
SHA512
6d3da02460e471d4b459f99602f9efcd7ec7c0e6487d4837689c963ae0adc05b9b37e909f4251ce956d54cd6e25ea03be1e0c548fdd96a2422a55531fbe6517b
-
SSDEEP
12288:cgjcpLmq2lWk8gIFjJyslu0JULFwqrBEtyJIkGkL1QBNeUxLW40T2eM:HjSGl1IFFJ00SBwqV914NroT2d
Score
10/10
Malware Config
Extracted
Family
bazarloader
C2
134.209.196.117
142.93.135.196
whitestorm9p.bazar
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 4 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\8186ddfa67159cae9dc6bbe64b76eb2e.dll1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\8186ddfa67159cae9dc6bbe64b76eb2e.dll,StartW {0E926056-932D-4A85-B03C-F1BB362D187C}1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
80KB