7559e6ca8b77400f88bf4e67208a1c32570a670068eccae9e3d226cc5471bd47

Submit
Reports

Overview

overview

Static

static

bazaar.202...nt.exe

windows7-x64

bazaar.202...nt.exe

windows10-2004-x64

bazaar.202...nt.exe

windows7-x64

bazaar.202...nt.exe

windows10-2004-x64

bazaar.202...an.exe

windows7-x64

bazaar.202...an.exe

windows10-2004-x64

bazaar.202...et.exe

windows7-x64

bazaar.202...et.exe

windows10-2004-x64

bazaar.202...lf.exe

windows7-x64

bazaar.202...lf.exe

windows10-2004-x64

bazaar.202...lf.exe

windows7-x64

bazaar.202...lf.exe

windows10-2004-x64

bazaar.202...it.exe

windows7-x64

bazaar.202...it.exe

windows10-2004-x64

bazaar.202...nt.exe

windows7-x64

bazaar.202...nt.exe

windows10-2004-x64

bazaar.202...an.exe

windows7-x64

bazaar.202...an.exe

windows10-2004-x64

bazaar.202...an.exe

windows7-x64

bazaar.202...an.exe

windows10-2004-x64

bazaar.202...an.exe

windows7-x64

bazaar.202...an.exe

windows10-2004-x64

bazaar.202...an.exe

windows7-x64

bazaar.202...an.exe

windows10-2004-x64

bazaar.202...an.exe

windows7-x64

bazaar.202...an.exe

windows10-2004-x64

bazaar.202...an.exe

windows7-x64

bazaar.202...an.exe

windows10-2004-x64

bazaar.202...an.exe

windows7-x64

bazaar.202...an.exe

windows10-2004-x64

bazaar.202...an.exe

windows7-x64

bazaar.202...an.exe

windows10-2004-x64

Resubmissions

26-09-2024 06:42

240926-hgnp9ashkk 10

25-09-2024 16:40

240925-t6kwfayfph 10

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
25-09-2024 16:40

Sharing

Copy URL

Twitter E-mail

Static task

static1

17 signatures

Behavioral task

behavioral1

Sample

bazaar.2020.02/Backdoor.MSIL.Agent.exe

Resource

win7-20240708-en

njrat discovery evasion persistence privilege_escalation trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

bazaar.2020.02/Backdoor.MSIL.Agent.exe

Resource

win10v2004-20240802-en

njrat discovery evasion persistence privilege_escalation trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral3

Sample

bazaar.2020.02/Backdoor.MSIL.Agent.exe

Resource

win7-20240729-en

njrat hacked discovery evasion persistence privilege_escalation trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral4

Sample

bazaar.2020.02/Backdoor.MSIL.Agent.exe

Resource

win10v2004-20240802-en

njrat discovery evasion persistence privilege_escalation trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral5

Sample

bazaar.2020.02/Backdoor.MSIL.Crysan.exe

Resource

win7-20240903-en

asyncrat null rat

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

bazaar.2020.02/Backdoor.MSIL.Crysan.exe

Resource

win10v2004-20240802-en

asyncrat null rat

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

bazaar.2020.02/Backdoor.Win32.DarkKomet.exe

Resource

win7-20240903-en

darkcomet hacked discovery persistence rat trojan upx

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral8

Sample

bazaar.2020.02/Backdoor.Win32.DarkKomet.exe

Resource

win10v2004-20240802-en

darkcomet hacked discovery persistence rat trojan upx

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral9

Sample

bazaar.2020.02/Backdoor.Win32.Delf.exe

Resource

win7-20240729-en

darkcomet mikel_04 discovery evasion persistence rat trojan upx

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral10

Sample

bazaar.2020.02/Backdoor.Win32.Delf.exe

Resource

win10v2004-20240802-en

darkcomet mikel_04 discovery evasion persistence rat trojan upx

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral11

Sample

bazaar.2020.02/Backdoor.Win32.Delf.exe

Resource

win7-20240704-en

darkcomet mikel50 discovery persistence rat trojan upx

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

bazaar.2020.02/Backdoor.Win32.Delf.exe

Resource

win10v2004-20240802-en

darkcomet mikel50 discovery persistence rat trojan upx

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral13

Sample

bazaar.2020.02/Backdoor.Win32.Parazit.exe

Resource

win7-20240903-en

discovery evasion persistence

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral14

Sample

bazaar.2020.02/Backdoor.Win32.Parazit.exe

Resource

win10v2004-20240802-en

njrat discovery evasion persistence trojan

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral15

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Agent.exe

Resource

win7-20240903-en

njrat hacked discovery trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral16

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Agent.exe

Resource

win10v2004-20240802-en

njrat discovery trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral17

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win7-20240903-en

asyncrat null rat

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral18

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win10v2004-20240802-en

asyncrat null rat

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral19

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win7-20240903-en

asyncrat null rat

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win10v2004-20240910-en

asyncrat null rat

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win7-20240903-en

asyncrat null rat

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win10v2004-20240802-en

asyncrat null rat

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win7-20240903-en

asyncrat null rat

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win10v2004-20240802-en

asyncrat null rat

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win7-20240729-en

asyncrat null rat

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win10v2004-20240802-en

asyncrat null rat

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win7-20240903-en

asyncrat null rat

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral30

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win10v2004-20240802-en

asyncrat null rat

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral31

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win7-20240903-en

asyncrat null rat

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe

Resource

win10v2004-20240802-en

asyncrat null rat

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

bazaar.2020.02/HEUR-Backdoor.MSIL.Crysan.exe
Size

79KB
MD5

e9e80e0e30405fa4d559d5303c72bf8e
SHA1

b6f3e43efc6ad94f87a36d25d4aa9f495a3af0f7
SHA256

4ece7a3cd6313c022ce3d30028a8af4f4f4da6a35efcddb8136b4bb5520fdb21
SHA512

ceba55d8cd62855d1254257f2c250150b3e08edf0260b907e80b45b5b2891bd9185d0290b945314fcf04c047bcbe1b94eb8a4f753cc7ee1b51575c1afd093215
SSDEEP

1536:3VZUzbOcyyPYvkx1ocD6v4cUqBYZDZ1bXgYqEiR3DY3:lZOtx1ocDncxYZl1bXgFEipDy

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\bazaar.2020.02\HEUR-Backdoor.MSIL.Crysan.exe
"C:\Users\Admin\AppData\Local\Temp\bazaar.2020.02\HEUR-Backdoor.MSIL.Crysan.exe"
1⤵
PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1984-0-0x000007FEF5863000-0x000007FEF5864000-memory.dmp

Filesize
4KB

Download
memory/1984-1-0x0000000000A40000-0x0000000000A5A000-memory.dmp

Filesize
104KB

Download
memory/1984-2-0x000007FEF5860000-0x000007FEF624C000-memory.dmp

Filesize
9.9MB

Download
memory/1984-3-0x000007FEF5860000-0x000007FEF624C000-memory.dmp

Filesize
9.9MB

Download
memory/1984-4-0x000007FEF5860000-0x000007FEF624C000-memory.dmp

Filesize
9.9MB

Download
memory/1984-5-0x000007FEF5860000-0x000007FEF624C000-memory.dmp

Filesize
9.9MB

Download