General

  • Target

    AnnualReport.exe

  • Size

    3.1MB

  • Sample

    210627-8lmy4l8fqs

  • MD5

    7908cc9996b7423c766157d8119df254

  • SHA1

    7974b277a69b8c811734a6ad30f3ad1f523d3503

  • SHA256

    6b665a866997d39ba17c6b687693c71b4d4a622d016ad7e0c37bc735524858be

  • SHA512

    8fc36eeef99a7e3df702672bc0f19077324cda0a17af0c75818d9f11c44c7c51d2d8b51290775ef22aedfb809a1b718a9593cf4777334d8b44d37a75e07c5554

Score
10/10

Malware Config

Extracted

Family

buer

C2

https://itofficemasword.com/

Targets

    • Target

      AnnualReport.exe

    • Size

      3.1MB

    • MD5

      7908cc9996b7423c766157d8119df254

    • SHA1

      7974b277a69b8c811734a6ad30f3ad1f523d3503

    • SHA256

      6b665a866997d39ba17c6b687693c71b4d4a622d016ad7e0c37bc735524858be

    • SHA512

      8fc36eeef99a7e3df702672bc0f19077324cda0a17af0c75818d9f11c44c7c51d2d8b51290775ef22aedfb809a1b718a9593cf4777334d8b44d37a75e07c5554

    Score
    10/10
    • Buer

      Buer is a new modular loader first seen in August 2019.

    • Buer Loader

      Detects Buer loader in memory or disk.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks