Analysis
-
max time kernel
140s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
07-03-2024 10:41
General
-
Target
b88a03c6ff58bbe98c2b46037c2e3b20.dll
-
Size
1.0MB
-
MD5
b88a03c6ff58bbe98c2b46037c2e3b20
-
SHA1
5153e73f8228896acca71818be751fe65170e0fa
-
SHA256
6e4c843402434ae40c95e9bc07ded85b89a637606c522831fa80bf01b94aec70
-
SHA512
4d2eb026020baec0c399ad54b5b4e1a11d1283c36048c5011bbc34d18f08bd36a4623cae5a78a215e033c3b31323c959b6152fc9d2024df97cee22e8591f530b
-
SSDEEP
12288:9fHnu1hxBOwTdG7MDsDbQg779SweGIvdZOyjGU+G0VCspXMl3A6Gnzq9PBa8nTo:pHK3OwTd8MQDbQgHgUIv1jGUXuCs9qI
Score
10/10
Malware Config
Extracted
Family
bazarloader
C2
104.248.170.50
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 4 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\b88a03c6ff58bbe98c2b46037c2e3b20.dll1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\b88a03c6ff58bbe98c2b46037c2e3b20.dll,DllRegisterServer {60636FCE-7E1C-43D6-9303-399B42E439A5}1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
156KB
-
Filesize
156KB
-
Filesize
156KB
-
Filesize
156KB