Analysis
- max time kernel
12s - max time network
112s - platform
windows10_x64 - resource
win10v20201028 - submitted
27/01/2021, 23:32
General
- Target wpjq2.bin.exe
- Sample210127-cl8nbgp85a
Score
10/10
Malware Config
Extracted
Family
-
buer
C2
-
officewestunionbank.com
-
bankcreditsign.com
Signatures
- Buer
Buer is a new modular loader first seen in August 2019.
- Buer Loader 2 IoCs
Detects Buer loader in memory or disk.
Processes
-
C:\Users\Admin\AppData\Local\Temp\wpjq2.bin.exe"C:\Users\Admin\AppData\Local\Temp\wpjq2.bin.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/640-2-0x00000000007B0000-0x00000000007B1000-memory.dmp
memory/640-3-0x0000000000030000-0x0000000000037000-memory.dmp
memory/640-4-0x0000000040000000-0x0000000040009000-memory.dmp