Overview

overview

10

Static

static

fd69924636...1a.dll

windows7_x64

10

fd69924636...1a.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd6992463689acf855ef55d06a01061a.dll

  • Size

    1.3MB

  • Sample

    210928-g7rzxsaha2

  • MD5

    fd6992463689acf855ef55d06a01061a

  • SHA1

    d8b3968a08b12e8ce4b1eec04eb5c86ad910145c

  • SHA256

    8b971c2c4c9a020eb274c36db20bc0e1b203a7909d63f48f99bef5594110929f

  • SHA512

    e41bbccea6c235771ebddfdcbc4de88f9179bca1c9b31d8d037e7d4a097b83714f14c1ec29d3eee3f3c8183ff263611e368ae7cdbb5955997464e5a74b4afbb5

Score
10/10
bazarloaderdropperloader

Malware Config

Targets

    • Target

      fd6992463689acf855ef55d06a01061a.dll

    • Size

      1.3MB

    • MD5

      fd6992463689acf855ef55d06a01061a

    • SHA1

      d8b3968a08b12e8ce4b1eec04eb5c86ad910145c

    • SHA256

      8b971c2c4c9a020eb274c36db20bc0e1b203a7909d63f48f99bef5594110929f

    • SHA512

      e41bbccea6c235771ebddfdcbc4de88f9179bca1c9b31d8d037e7d4a097b83714f14c1ec29d3eee3f3c8183ff263611e368ae7cdbb5955997464e5a74b4afbb5

    Score
    10/10
    bazarloaderdropperloader

    • Bazar Loader

      Detected loader normally used to deploy BazarBackdoor malware.

      loaderdropperbazarloader

    • Bazar/Team9 Loader payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks