Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

font.tiff.exe

windows7_x64

10

font.tiff.exe

windows10_x64

10

Analysis

  • max time kernel
    23s
  • max time network
    110s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    26/01/2021, 18:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    font.tiff.exe

  • Size

    235KB

  • MD5

    cc0631f2ca59175c237e7fba06a7d533

  • SHA1

    0c93576aeee786b1ef8818a56653d4c0e41a67df

  • SHA256

    c1a1988e6f043d0e73c9555ccaad2adb3683c22b0569fc0f6be24c3e4f8c82ff

  • SHA512

    d33b7ecd31f69e230c33dd3a86cc337c62870630c95e679d504a22779e9c57715754b58587f53e758e2becd0eef4bcf26d41d9a5ac1e6f42b961c84cc92bc918

Score
10/10
buerloader

Malware Config

Extracted

Family

buer

C2

hetaskosupportcenter.com

Signatures

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer
  • Buer Loader 2 IoCs

    Detects Buer loader in memory or disk.

Processes

  • C:\Users\Admin\AppData\Local\Temp\font.tiff.exe
    "C:\Users\Admin\AppData\Local\Temp\font.tiff.exe"
    1⤵
      PID:4052

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4052-2-0x0000000002310000-0x0000000002311000-memory.dmp

      Filesize

      4KB

      Download

    • memory/4052-4-0x0000000040000000-0x000000004000A000-memory.dmp

      Filesize

      40KB

      Download

    • memory/4052-3-0x0000000000570000-0x0000000000578000-memory.dmp

      Filesize

      32KB

      Download