Overview

overview

10

Static

static

1

form.txt.exe

windows7_x64

10

form.txt.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    form.txt.exe
  • Size 123KB
  • Sample210203-lar2cstdrx
  • SHA256 9cd888fa0692f8d0ca69548532ae72171b426d0e9d8b3b46acdbbe7636d653da
  • MD5 SHA1 SHA512
Score
10/10
buerloader

Malware Config

Extracted

Family

  • buer

C2

  • officewestbankingconc.com

Targets

    • Target
      form.txt.exe
    • Size 123KB
    • SHA256 9cd888fa0692f8d0ca69548532ae72171b426d0e9d8b3b46acdbbe7636d653da
    • MD5 SHA1 SHA512
    Score
    10/10
    buerloader

    • Buer

      Buer is a new modular loader first seen in August 2019.

      loaderbuer

    • Buer Loader

      Detects Buer loader in memory or disk.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks