Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
11s -
max time network
99s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
03/03/2021, 17:54
Static task
static1
Behavioral task
behavioral1
Sample
footer.dll.exe
Resource
win7v20201028
0 signatures
0 seconds
General
-
Target
footer.dll.exe
-
Size
262KB
-
MD5
50571aaed3910bfff867cbcbce73c9fc
-
SHA1
79ce9877ed86eda53c93cbb10fa5952f51896ad1
-
SHA256
1889d0da16fd4ff66844c822a8a92e07a1702f1b5b97bfe6bb1a943d22d662c8
-
SHA512
ca3ec3a06d33a994fa89225bcc1a88e5456f33cc60197bfe33ec39187e6a3ca8d2cc3d0de3d7dc630fed277a2608e59b5ae48ea75a9ec72a10a6cc9c823f5ced
Malware Config
Extracted
Family
buer
C2
officegrandbanking.com
Signatures
-
Buer Loader 2 IoCs
Detects Buer loader in memory or disk.
resource yara_rule behavioral2/memory/1248-3-0x0000000000030000-0x0000000000037000-memory.dmp buer behavioral2/memory/1248-4-0x0000000040000000-0x0000000040009000-memory.dmp buer