Analysis
- max time kernel
150s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
09/03/2024, 14:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bc0cc900b282515b4f00292519de60d4.dll
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bc0cc900b282515b4f00292519de60d4.dll
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
- Target bc0cc900b282515b4f00292519de60d4.dll
- Size 242KB
- Sample240309-rw2ebsag2v
- SHA256 48eb8d9c064fd5db379325f37a86c927bc8880d736b1ac10ab4a53a448157d89
- MD5 bc0cc900b282515b4f00292519de60d4
- SHA1 5cfda1995ff41813c3b4132bad151c0c592dba3b
- SHA512 104657c2c96110ee0d04d242ce3a6edfd3d3fa00db3435cee6326be424c69c31d85d6c8ebef476ed117cd1dfbb343bf2eea2c672571d12473b72643690ab167b
- SSDEEP 3072:lT/aaUF7JjCqyWFDUX9Yk2YMsLICMB61BDWY4t4OIvWcg/9l:INeEDtk2gLpj1IY4t4OI+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
- Bazar/Team9 Loader payload 2 IoCs
resource yara_rule behavioral2/memory/1608-0-0x0000000002490000-0x0000000002627000-memory.dmp BazarLoaderVar6 behavioral2/memory/1608-1-0x0000000002490000-0x0000000002627000-memory.dmp BazarLoaderVar6