General

  • Target

    ST33MQz3ZZ47fFjr8g09.exe

  • Size

    123KB

  • Sample

    210204-k8eszdwd4e

  • MD5

    0ca7982165af34d00aa28aa8a0564c5e

  • SHA1

    b2aab201e5fda813600514f81f5224d267fcdbb8

  • SHA256

    7f43651edf5d5bb92a5c6c66042d068d2d4e27cb9a6e45d46e03ca7cbfe4f39f

  • SHA512

    ef4c6584a0b3fa255e28e217fc5243c71268eea1883c42b7b228cdaa64f928bf2af093663ce04bc18e75d893912f048d9fae892437904c7e78ed5d8367a9717d

Score
10/10

Malware Config

Extracted

Family

buer

C2

officewestbankingconc.com

Targets

    • Target

      ST33MQz3ZZ47fFjr8g09.exe

    • Size

      123KB

    • MD5

      0ca7982165af34d00aa28aa8a0564c5e

    • SHA1

      b2aab201e5fda813600514f81f5224d267fcdbb8

    • SHA256

      7f43651edf5d5bb92a5c6c66042d068d2d4e27cb9a6e45d46e03ca7cbfe4f39f

    • SHA512

      ef4c6584a0b3fa255e28e217fc5243c71268eea1883c42b7b228cdaa64f928bf2af093663ce04bc18e75d893912f048d9fae892437904c7e78ed5d8367a9717d

    Score
    10/10
    • Buer

      Buer is a new modular loader first seen in August 2019.

    • Buer Loader

      Detects Buer loader in memory or disk.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks