Analysis

  • max time kernel
    146s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/04/2025, 09:27

General

  • Target

    5ad6238f5ff9e75b51ad4d23a8ec459ce2547f441969ee029d0499ef2213ce4a.exe

  • Size

    73KB

  • MD5

    4e36b00e9506f3f3e0bf727d344c853b

  • SHA1

    0df3e26e416cef764af00fe0df9099d59a32d2dd

  • SHA256

    5ad6238f5ff9e75b51ad4d23a8ec459ce2547f441969ee029d0499ef2213ce4a

  • SHA512

    342fe0381e767df147ae0d306e02c072eda2875f0cc0abc68af6a66c69dbe19c18c62e519817201b03280c6ad2c7dc448bbb0de864d2217fc11a9a22d9639889

  • SSDEEP

    1536:GqOne6WFpvQeWCsvi5IjVD4LnLaVWKKcRoUwWXVgk:GqGF66WCwWXVF

Malware Config

Signatures

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

  • Bazarloader family
  • Bazar/Team9 Loader payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5ad6238f5ff9e75b51ad4d23a8ec459ce2547f441969ee029d0499ef2213ce4a.exe
    "C:\Users\Admin\AppData\Local\Temp\5ad6238f5ff9e75b51ad4d23a8ec459ce2547f441969ee029d0499ef2213ce4a.exe"
    1⤵
      PID:5476

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5476-0-0x00007FF606730000-0x00007FF60675B000-memory.dmp

      Filesize

      172KB