Overview

overview

10

Static

static

wpjq2.bin.exe

windows7_x64

wpjq2.bin.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    wpjq2.bin.zip
  • Size 85KB
  • Sample210127-cl8nbgp85a
  • SHA256 69fe5777f51da82b6fd373493286b70d2654e95e233d79b3895ac040497e657a
  • MD5 SHA1 SHA512
Score
10/10
buerloader

Malware Config

Extracted

Family

  • buer

C2

  • officewestunionbank.com

  • bankcreditsign.com

Targets

    • Target
      wpjq2.bin
    • Size 143KB
    • SHA256 be7578bac51d8aa3de55c4dceb0a622b1dce54636e8bad9d3c5d79c676d980f8
    • MD5 SHA1 SHA512
    Score
    10/10
    buerloader

    • Buer

      Buer is a new modular loader first seen in August 2019.

      loaderbuer

    • Buer Loader

      Detects Buer loader in memory or disk.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks