Analysis
-
max time kernel
127s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
27-02-2024 22:31
General
-
Target
aa5202ea4a4dec711b40a2ed7b660cb6.dll
-
Size
164KB
-
MD5
aa5202ea4a4dec711b40a2ed7b660cb6
-
SHA1
d6848f7f53ae925d0136746860971277c9375c85
-
SHA256
7a2472435ef65a2c587653d2e9890934b047a4dc0fbf30a77c7cf404163277c9
-
SHA512
aea77bf9e3237f2134371beb97047206a6d38e24ffdb2c092f2fad5d32ef95ce97c5d21acb6cf7704346dddfc640de72f4079d266d4f74b8e98e49682423adcc
-
SSDEEP
3072:cTltpXTmRUD82PbjCb5lcUpLhUf05x97bsqWpaM0fB8U6xcBwVSuU1E7YbqnOuOQ:CuC7jj05CUpLhUsj97hM28xmwUuUKkbM
Score
10/10
Malware Config
Extracted
Family
bazarloader
C2
167.99.240.197
207.154.236.187
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 4 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\aa5202ea4a4dec711b40a2ed7b660cb6.dll1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\aa5202ea4a4dec711b40a2ed7b660cb6.dll,DllRegisterServer {05B0EC84-406C-4297-B9BB-70B7334668A3}1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
968KB
-
Filesize
968KB
-
Filesize
968KB
-
Filesize
968KB