Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20250502-en - resource tags
arch:x64arch:x86image:win11-20250502-enlocale:en-usos:windows11-21h2-x64system - submitted
17/05/2025, 14:32
Behavioral task
behavioral1
Sample
ec2fe26228a454bcd392c732d70a66e2.exe
Resource
win10v2004-20250502-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ec2fe26228a454bcd392c732d70a66e2.exe
Resource
win11-20250502-en
3 signatures
150 seconds
General
- Target ec2fe26228a454bcd392c732d70a66e2.exe
- Size 73KB
- Sample250517-rv83savmt2
- SHA256 05a7ff73cb4f91eafdf472336c1d319e0ce697817f72e2c916a5251dc4748336
- MD5 ec2fe26228a454bcd392c732d70a66e2
- SHA1 23d23c5a5d3a999ee826e92a688a904dafb9c52b
- SHA512 05899987a5711b7062284c17316aaee75ed9205d37f343bd48b3e5ad006c18d5bfd97c21ae24bc7b67af3e2dbb51d23a7b578d36bd7709d982b7a7473fa9703a
- SSDEEP 1536:RBv5rZFZvQqWh8VCMBMFCn3+pVWtHe3v4h:RHpEB4h
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
- Bazarloader family
- Bazar/Team9 Loader payload 1 IoCs
resource yara_rule behavioral2/memory/672-4-0x00007FF7AE8D0000-0x00007FF7AE8FB000-memory.dmp BazarLoaderVar5