Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
06-01-2025 21:13
General
-
Target
JaffaCakes118_3ad2ab8a43b11771154caf905449b68b.dll
-
Size
825KB
-
MD5
3ad2ab8a43b11771154caf905449b68b
-
SHA1
2fefd08b3328adaa27d50542f62f99381cdb7a67
-
SHA256
916394da6c5c5136737c2af63604c19e1ce952cc5f5652236e3ecdf1d3b4043d
-
SHA512
6ef801ad9de9e2cbb8e769b35c2dddf465788ac8f1fdb764151d5014f449ab3dfc8866a3760bb91b0310f1b2dee44ef9048c99510ecec96761fb484e9f7cecd5
-
SSDEEP
12288:NafGVgqM7aafQIbyhxi5zhRSAofMvG9VWTY3DdWyS5EPGc:NafGVJwyAq+hfgAG9VWGdWyIc
Score
10/10
Malware Config
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazarloader family
-
Bazar/Team9 Loader payload 3 IoCs
-
Tries to connect to .bazar domain 2 IoCs
Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.
-
Unexpected DNS network traffic destination 2 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_3ad2ab8a43b11771154caf905449b68b.dll1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
192KB
-
Filesize
192KB