Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    12s
  • max time network
    112s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    08/02/2021, 04:38 UTC

General

  • Target

    km1fe.exe

Score
10/10

Malware Config

Extracted

Family

buer

C2

officewestunionbank.com

bankcreditsign.com

Signatures

  • Buer

    Buer is a new modular loader first seen in August 2019.

  • Buer Loader 2 IoCs

    Detects Buer loader in memory or disk.

Processes

  • C:\Users\Admin\AppData\Local\Temp\km1fe.exe
    "C:\Users\Admin\AppData\Local\Temp\km1fe.exe"
    1⤵
      PID:496

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/496-2-0x00000000006E0000-0x00000000006E1000-memory.dmp

      Filesize

      4KB

    • memory/496-4-0x0000000040000000-0x0000000040009000-memory.dmp

      Filesize

      36KB

    • memory/496-3-0x0000000000030000-0x0000000000037000-memory.dmp

      Filesize

      28KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.