Analysis
-
max time kernel
124s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
09-03-2024 14:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bc0cc900b282515b4f00292519de60d4.dll
Resource
win7-20240220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bc0cc900b282515b4f00292519de60d4.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
bc0cc900b282515b4f00292519de60d4.dll
-
Size
242KB
-
MD5
bc0cc900b282515b4f00292519de60d4
-
SHA1
5cfda1995ff41813c3b4132bad151c0c592dba3b
-
SHA256
48eb8d9c064fd5db379325f37a86c927bc8880d736b1ac10ab4a53a448157d89
-
SHA512
104657c2c96110ee0d04d242ce3a6edfd3d3fa00db3435cee6326be424c69c31d85d6c8ebef476ed117cd1dfbb343bf2eea2c672571d12473b72643690ab167b
-
SSDEEP
3072:lT/aaUF7JjCqyWFDUX9Yk2YMsLICMB61BDWY4t4OIvWcg/9l:INeEDtk2gLpj1IY4t4OI+
Score
10/10
Malware Config
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 2 IoCs
Processes:
resource yara_rule behavioral1/memory/1992-0-0x0000000001E80000-0x0000000002017000-memory.dmp BazarLoaderVar6 behavioral1/memory/1992-1-0x0000000001E80000-0x0000000002017000-memory.dmp BazarLoaderVar6