Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
113s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
10/04/2024, 12:21
General
-
Target
8661bd7d893fe1dd2109fac55cf9cea5f609012769732039e20165a3198c1086.dll
-
Size
733KB
-
MD5
14572c3002b0e94ff87878d366bc277d
-
SHA1
1585af5d6c0485a9333d898f2433128707f0c924
-
SHA256
8661bd7d893fe1dd2109fac55cf9cea5f609012769732039e20165a3198c1086
-
SHA512
7297dc2126cf73428d3e8c26f5b76a25d7051810320781f6efb8cc9ba88077972236dc0b1363dfd2efac4a320b9cdb3d4c11a5d0b9f8453b06e2eb1250a8c39e
-
SSDEEP
12288:yy9x20pS5wVnb9BNobEyindCqUf+sgUGzS8KseBOwLc9:yyf2Qnb9BNcELdBU/gUI4OwI
Score
10/10
Malware Config
Extracted
Family
bazarloader
C2
reddew28c.bazar
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload 5 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\8661bd7d893fe1dd2109fac55cf9cea5f609012769732039e20165a3198c1086.dll1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\8661bd7d893fe1dd2109fac55cf9cea5f609012769732039e20165a3198c1086.dll,DllRegisterServer {6C9E9EB5-144D-4D93-BA69-DACF8348547C}1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
-
Filesize
172KB
-
Filesize
172KB
-
Filesize
172KB
-
Filesize
172KB