Resubmissions

22-09-2020 21:41

200922-grzel9596s 10

22-09-2020 20:40

200922-l2sm5b4e8x 10

General

  • Target

    Review.exe

  • Size

    239KB

  • Sample

    200922-l2sm5b4e8x

  • MD5

    fa0322fb70610d6e67585588184eda39

  • SHA1

    7bf793587550abbc8a39d5cb26b1328483b17820

  • SHA256

    3d994a2f80a63f31bf56ddded5ed35f020c40c0324b3ab1935e08b15c25ba017

  • SHA512

    6615bd7060022ab8e6e36160955f1e09d6800dbe509b85aafb738f890c54c1568cbbfbd77451a55bdefc42dd2c1ad899d78ef4022a8cdcfadcd2d1b3f0baa56b

Score
10/10

Malware Config

Extracted

Family

buer

C2

https://104.248.83.13/

Targets

    • Target

      Review.exe

    • Size

      239KB

    • MD5

      fa0322fb70610d6e67585588184eda39

    • SHA1

      7bf793587550abbc8a39d5cb26b1328483b17820

    • SHA256

      3d994a2f80a63f31bf56ddded5ed35f020c40c0324b3ab1935e08b15c25ba017

    • SHA512

      6615bd7060022ab8e6e36160955f1e09d6800dbe509b85aafb738f890c54c1568cbbfbd77451a55bdefc42dd2c1ad899d78ef4022a8cdcfadcd2d1b3f0baa56b

    Score
    10/10
    • Buer

      Buer is a new modular loader first seen in August 2019.

    • Buer Loader

      Detects Buer loader in memory or disk.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks