Analysis
- max time kernel
12s - max time network
110s - platform
windows10_x64 - resource
win10v20201028 - submitted
05/02/2021, 00:41
General
- Target zrmbk.exe
- Size 97KB
- Sample210205-69vnhad6b6
- SHA256 d333192a262ceaec75b68c0e6082cf868eb77a0e81010f590451814770b6ce31
Score
10/10
Malware Config
Extracted
Family
-
buer
C2
-
officewestunionbank.com
-
bankcreditsign.com
Signatures
- Buer
Buer is a new modular loader first seen in August 2019.
- Buer Loader 2 IoCs
Detects Buer loader in memory or disk.
Processes
-
C:\Users\Admin\AppData\Local\Temp\zrmbk.exe"C:\Users\Admin\AppData\Local\Temp\zrmbk.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1628-2-0x00000000007D0000-0x00000000007D1000-memory.dmp
memory/1628-3-0x0000000000030000-0x0000000000037000-memory.dmp
memory/1628-4-0x0000000040000000-0x0000000040009000-memory.dmp