General

  • Target

    viuql.bin.zip

  • Size

    114KB

  • Sample

    210202-zesazw9wha

  • MD5

    27a895f29d07e97fde24e91b21ab61d7

  • SHA1

    8def7a86fd9ea4b16e5341589c59e9566e85814e

  • SHA256

    85e2700f97933b2d99ef1f5764529ac8dc5ef501c6d5cfa545922afd11f5bf5a

  • SHA512

    2f6acf063b2578185fd8793f4555906ca2054b81006b34cf1983cfa5b3d1ca5ba60aa8c29745b7ccec038a5e6bc1166dbf496e5d93f66c7141cdaa44d58748b4

Score
10/10

Malware Config

Extracted

Family

buer

C2

officewestunionbank.com

bankcreditsign.com

Targets

    • Target

      viuql.bin

    • Size

      245KB

    • MD5

      e90812d85ff0ffccbe59b59fd5699ce9

    • SHA1

      7e86724b9a5b85a6006e53b36cef2a5607040cd3

    • SHA256

      5ed5c424e11fd3bf8fa1a4c43469f115bc7a1c9340e57768a35ca1f1f2ab9d87

    • SHA512

      22f617e64e91524f0c0f0ca5223ec236d467c12a6c8eed995b51bc59b1d927222ae2328e30c01945136e6b791f279411dff83dc4b24a0f6a02e9a6e9ae0c011e

    Score
    10/10
    • Buer

      Buer is a new modular loader first seen in August 2019.

    • Buer Loader

      Detects Buer loader in memory or disk.

MITRE ATT&CK Matrix

Tasks