Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
01-04-2024 07:40
General
-
Target
6bf2a52b5755de865d691045806936f9_JaffaCakes118.dll
-
Size
353KB
-
MD5
6bf2a52b5755de865d691045806936f9
-
SHA1
70c164d08608478ba36e1479f0277dffc4fd951f
-
SHA256
5a7d360225defcc80b5d30efb865f76d377aaa044b5ec42c2c40a3359c968f3e
-
SHA512
b7a3c199e2ae2904907726b831ba00222c734e69079574aa6ddbf023bbe5cb922a7cbd0130f3557b67ccc624264fb516824e1087fde4fbcce3681b66c16782bf
-
SSDEEP
6144:pHJGKt24zrhvsoWb9BHohiA2lZYjQ7B6TuvJ0VPRevpyB4LvW:pHkKFBsoeoV2lZYs7Duap
Score
10/10
Malware Config
Extracted
Family
bazarloader
C2
reddew28c.bazar
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 5 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\6bf2a52b5755de865d691045806936f9_JaffaCakes118.dll1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\6bf2a52b5755de865d691045806936f9_JaffaCakes118.dll,DllRegisterServer {C6C6C77A-CC82-4879-8261-8D93A3665F70}1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB