Overview

overview

10

Static

static

cobaltocyanic.exe

windows7_x64

10

Resubmissions

23/08/2021, 08:27

210823-eq4gl5gpsj10

22/08/2021, 20:01

210822-da2dyvnqx610

Sharing

Copy URL Twitter E-mail

General

  • Target
    cobaltocyanic.exe
  • Size 3.9MB
  • Sample210823-eq4gl5gpsj
  • SHA256 64dd547546394e1d431a25a671892c7aca9cf57ed0733a7435028792ad42f4a7
  • MD5 SHA1 SHA512
Score
10/10
rustybuerloader

Malware Config

Extracted

Family

  • rustybuer

C2

  • https://awmelisers.com/

Targets

    • Target
      cobaltocyanic.exe
    • Size 3.9MB
    • SHA256 64dd547546394e1d431a25a671892c7aca9cf57ed0733a7435028792ad42f4a7
    • MD5 SHA1 SHA512
    Score
    10/10
    rustybuerloader

    • RustyBuer

      RustyBuer is a new variant of Buer loader written in Rust.

      loaderrustybuer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks