bazar[.]iso | Triage™

Resubmissions

07/10/2024, 07:07

241007-hxxyvswerg10

07/10/2024, 07:04

241007-hv3fkascrp10

04/10/2024, 09:43

241004-lp25ds1fje10

Sharing

Copy URL Twitter E-mail

General

Target
bazar.iso
Size 270KB
Sample241007-hv3fkascrp
SHA256 9fdec91231fe3a709c8d4ec39e25ce8c55282167c561b14917b52701494ac269
MD5 b1bde76849fc4801a0369c7097600863
SHA1 2050daf2e7882297afdd549b61d70d27e79fd836
SHA512 4d855c7dcf6ce7d56dd976908e6a5d356ad04cad0df8280d74ce474c25e962142f0271408dc1a987951fe4679cbbc291b71f7d47b1b8f151d04970d74156a0b6
SSDEEP 6144:AWnRr/qJy8CQnzX473venaGyRAU9uBXP:Bn9qJ5rnzoLvong6X
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/DumpStack.log

File Explorer

bazar.iso

.iso 270KB
out.iso

.iso 270KB
Attachments.lnk

.lnk 1KB
DumpStack.log

.dll 217KB

bazar.iso

SHA256 9fdec91231fe3a709c8d4ec39e25ce8c55282167c561b14917b52701494ac269
MD5 b1bde76849fc4801a0369c7097600863
SHA1 2050daf2e7882297afdd549b61d70d27e79fd836
SHA512 4d855c7dcf6ce7d56dd976908e6a5d356ad04cad0df8280d74ce474c25e962142f0271408dc1a987951fe4679cbbc291b71f7d47b1b8f151d04970d74156a0b6
SSDEEP 6144:AWnRr/qJy8CQnzX473venaGyRAU9uBXP:Bn9qJ5rnzoLvong6X
MD5 SHA1 SHA512 SSDEEP

DumpStack.log

SHA256 4bc9368951402ceeeb84da58c82e02a4ea9e09f5a4425daf5094ea5d87a14e9a
MD5 f7047fdbd3cd218b55cf4e2d6b9fb4f0
SHA1 a9c1e9a78934c9cfa2dbb6562ca8cdb9d67bbb05
SHA512 950f4bde7f04a581496df019719074fa4516ce0bd7ace547a77bbb069467816b4c42236b6f23c4fd476ac74c907fa764861c9422c832c7910ed651b6445138f1
SSDEEP 6144:aWnRr/qJy8CQnzX473venaGyRAU9uBXP:rn9qJ5rnzoLvong6X
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4133

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths