General

  • Target

    8754076d6e5fb4209c4a703eac804881.exe

  • Size

    86KB

  • Sample

    201216-x2sz67ldc6

  • MD5

    8754076d6e5fb4209c4a703eac804881

  • SHA1

    ad4bc65f8cbae9adc33792bb7115342562cf11d0

  • SHA256

    eb9ed562ea848b9b3901a0d9cb2f9793115ba6dad9b2bf3929f75f9358ed2c23

  • SHA512

    501ee70850266006fd6c43b5042241e007beb7b1463e46f453ca50e63efa2099bd2452d7979003cc9c66431cc1a9609bdb261617ea8c6c368ea6987b4f025fe6

Score
10/10

Malware Config

Extracted

Family

buer

C2

softwareconsbank.com

Targets

    • Target

      8754076d6e5fb4209c4a703eac804881.exe

    • Size

      86KB

    • MD5

      8754076d6e5fb4209c4a703eac804881

    • SHA1

      ad4bc65f8cbae9adc33792bb7115342562cf11d0

    • SHA256

      eb9ed562ea848b9b3901a0d9cb2f9793115ba6dad9b2bf3929f75f9358ed2c23

    • SHA512

      501ee70850266006fd6c43b5042241e007beb7b1463e46f453ca50e63efa2099bd2452d7979003cc9c66431cc1a9609bdb261617ea8c6c368ea6987b4f025fe6

    Score
    10/10
    • Buer

      Buer is a new modular loader first seen in August 2019.

    • Buer Loader

      Detects Buer loader in memory or disk.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks