General

  • Target

    hkfdv.bin.zip

  • Size

    125KB

  • Sample

    210128-ewrjkqgzjx

  • MD5

    bcf660533fba7bde5487c2f9168b146d

  • SHA1

    7f4a52051a299341b8ac147efdd7552dd569a9d9

  • SHA256

    431dff2499780ece89d9baf0a1946dea19687aec6068de6d4ba6006ecaa0ce95

  • SHA512

    4a78bc46218f1c12bc6262fb7b30664bf7f010af601c9efc3930c494d05c4414f796f5a85cf4cca4ffc7e766ea1b0f863dc4f63cca8a0be7676b86fb8db91d35

Score
10/10

Malware Config

Extracted

Family

buer

C2

officewestunionbank.com

bankcreditsign.com

Targets

    • Target

      hkfdv.bin

    • Size

      230KB

    • MD5

      ec0455291ff419ef9291aabd5b8660c7

    • SHA1

      e8a8e08fd0d6d067c926ba8482e6f32fb020ff17

    • SHA256

      e4a7abdf26f4fc306266a550d0ef0dbb37241429f50faf35e772bba9819ce4c6

    • SHA512

      cde4efcb6f373ba057cf5e6e8b2c11175aec7a317418cd49960adb515c3b47d5cf4607d3051eb523bb5cc441528f9a3ac080a5180878552da38afdddade1635b

    Score
    10/10
    • Buer

      Buer is a new modular loader first seen in August 2019.

    • Buer Loader

      Detects Buer loader in memory or disk.

MITRE ATT&CK Matrix

Tasks