Overview

overview

10

Static

static

3

2331fa420b...a9.dll

windows7-x64

10

2331fa420b...a9.dll

windows10-2004-x64

10

Analysis

  • max time kernel
    93s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-11-2024 08:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2331fa420bee83df1248af48853a6f7748923cdae906b58c43ef8e11c6c72ca9.dll

  • Size

    536KB

  • MD5

    fe8a0ef0c5c1d5d8dd2517abb69dcdf5

  • SHA1

    a75acad19f4be69b0b6870f14e413bb4de06ec73

  • SHA256

    2331fa420bee83df1248af48853a6f7748923cdae906b58c43ef8e11c6c72ca9

  • SHA512

    a3b046e9f79692e1e9992cfb319820c5be6b44e9478ecd3c5c83c37bdcb0354216a674132e7c75e87998a91d250ae08f7362ee8877144aa1d4b04dda6ba2d775

  • SSDEEP

    12288:Zyt/7qSH5Z/zY5wkzg+28UkWotGIDODuIPTr0:ZS/v5iwkzA8UkWMGWOdr0

Score
10/10
bazarloaderdropperloader

Malware Config

Signatures

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader
  • Bazarloader family
    bazarloader
  • Bazar/Team9 Loader payload 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\2331fa420bee83df1248af48853a6f7748923cdae906b58c43ef8e11c6c72ca9.dll,#1
    1⤵
      PID:1504

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1504-0-0x00000139A7380000-0x00000139A73AA000-memory.dmp

      Filesize

      168KB

      Download

    • memory/1504-1-0x00000139A7380000-0x00000139A73AA000-memory.dmp

      Filesize

      168KB

      Download