Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

form.txt.exe

windows7_x64

10

form.txt.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    form.txt.exe

  • Size

    123KB

  • Sample

    210203-vd5bpvh8v6

  • MD5

    cb80d26975639b66bb5ecd1f90e623ed

  • SHA1

    95c973e9aad17101b29bd195f9c4624922d987ee

  • SHA256

    9cd888fa0692f8d0ca69548532ae72171b426d0e9d8b3b46acdbbe7636d653da

  • SHA512

    2adf13898114f0a2ebe3b8d279ae3dbc6693db4b44ac7a35ca9e61064caf77edbcbc6b4389542529d74d8347752b7ea00ea969ad7cc8ba6fa5dc0def31f32040

Score
10/10
buerloader

Malware Config

Extracted

Family

buer

C2

officewestbankingconc.com

Targets

    • Target

      form.txt.exe

    • Size

      123KB

    • MD5

      cb80d26975639b66bb5ecd1f90e623ed

    • SHA1

      95c973e9aad17101b29bd195f9c4624922d987ee

    • SHA256

      9cd888fa0692f8d0ca69548532ae72171b426d0e9d8b3b46acdbbe7636d653da

    • SHA512

      2adf13898114f0a2ebe3b8d279ae3dbc6693db4b44ac7a35ca9e61064caf77edbcbc6b4389542529d74d8347752b7ea00ea969ad7cc8ba6fa5dc0def31f32040

    Score
    10/10
    buerloader

    • Buer

      Buer is a new modular loader first seen in August 2019.

      loaderbuer

    • Buer Loader

      Detects Buer loader in memory or disk.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.