Analysis
-
max time kernel
3s -
max time network
11s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
05-02-2021 00:41
General
-
Target
zrmbk.exe
-
Size
97KB
-
MD5
9168378e6849f1547829afc3f0357f6a
-
SHA1
097d64d174b8243434f026f2fd24e536cc3686bc
-
SHA256
d333192a262ceaec75b68c0e6082cf868eb77a0e81010f590451814770b6ce31
-
SHA512
4c69f85af810334506dd1b8d2e409e30ce8c8471073b56bece6312dcda109705720c41255d49e1d7976b847f4ca586113208fdec805aac2398fc890fc230754b
Score
10/10
Malware Config
Extracted
Family
buer
C2
officewestunionbank.com
bankcreditsign.com
Signatures
-
Buer
Buer is a new modular loader first seen in August 2019.
-
Buer Loader 2 IoCs
Detects Buer loader in memory or disk.
Processes
-
C:\Users\Admin\AppData\Local\Temp\zrmbk.exe"C:\Users\Admin\AppData\Local\Temp\zrmbk.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
-
Filesize
28KB
-
Filesize
36KB