Analysis
-
max time kernel
105s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system -
submitted
02/04/2025, 10:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e7c52bb15d132cd171d7d3521601ba64389600b02df06ab8c8b10236523857d6.exe
Resource
win10v2004-20250314-en
3 signatures
150 seconds
General
-
Target
e7c52bb15d132cd171d7d3521601ba64389600b02df06ab8c8b10236523857d6.exe
-
Size
312KB
-
MD5
03bd29ce9a726654cf9666e450f62e53
-
SHA1
e1b1dc40171f62a3fb4c54b332094cd4b4c25c38
-
SHA256
e7c52bb15d132cd171d7d3521601ba64389600b02df06ab8c8b10236523857d6
-
SHA512
3bb8ef186647749e588200d85aab5b4afa14703f50415a67ba0b453656e800be4c282b506a160f353c56459493d2700c19b5abb133336a229cab1e68d593c181
-
SSDEEP
6144:rOCN2BhWjd0/8Z9sn3yp2aZqSOOGVB46qSAhil+:rPPj1ZKaq1
Score
10/10
Malware Config
Signatures
-
Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazarloader family
-
Bazar/Team9 Loader payload 1 IoCs
resource yara_rule behavioral1/memory/1664-0-0x0000028288DE0000-0x0000028288DF2000-memory.dmp BazarLoaderVar5