General

  • Target

    SCD10093264.jpg.exe

  • Size

    104KB

  • Sample

    210210-fv2eryzac2

  • MD5

    1fa27c5e084887e9e3a2e232d27e10e3

  • SHA1

    a7c98a694753ed745e8618369d16e39c46cca1e7

  • SHA256

    41a4ee153b3c61cc8ed50de571e5b8f884de1c8c07332b7b31f238360832988c

  • SHA512

    81ecb5e4b3ea478f27509d1eafd106ec224fc0ccdfd411cb3b2345fc752d738f6300fd575a2941611e1763dce125364fb765a48835249cd7e7e33e28a01f40b5

Score
10/10

Malware Config

Extracted

Family

buer

C2

dtermalherbhos.com

Targets

    • Target

      SCD10093264.jpg.exe

    • Size

      104KB

    • MD5

      1fa27c5e084887e9e3a2e232d27e10e3

    • SHA1

      a7c98a694753ed745e8618369d16e39c46cca1e7

    • SHA256

      41a4ee153b3c61cc8ed50de571e5b8f884de1c8c07332b7b31f238360832988c

    • SHA512

      81ecb5e4b3ea478f27509d1eafd106ec224fc0ccdfd411cb3b2345fc752d738f6300fd575a2941611e1763dce125364fb765a48835249cd7e7e33e28a01f40b5

    Score
    10/10
    • Buer

      Buer is a new modular loader first seen in August 2019.

    • Buer Loader

      Detects Buer loader in memory or disk.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks