Analysis
- max time kernel
144s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
- submitted
13/02/2024, 04:16
General
- Target 987460a06683ea111a7ea34f7147d827.dll
- Size 242KB
- Sample240213-ewav6aag66
- SHA256 1a7ac36779e8df2854cd900ef836e9ba34ec63f7831ab3dc8862f75007841682
Score
10/10
Malware Config
Signatures
- Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
- Bazar/Team9 Loader payload 4 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\987460a06683ea111a7ea34f7147d827.dll1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\987460a06683ea111a7ea34f7147d827.dll,StartW 38556979121⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2228-1-0x0000017521B20000-0x0000017521CAC000-memory.dmp
memory/2228-2-0x0000017521B20000-0x0000017521CAC000-memory.dmp
memory/4188-0-0x0000000002B20000-0x0000000002CAC000-memory.dmp
memory/4188-3-0x0000000002B20000-0x0000000002CAC000-memory.dmp