General
-
Target
SecuriteInfo.com.Trojan.GenericKD.46929464.6664.11196
-
Size
188KB
-
Sample
210905-xx8gxschcr
-
MD5
590459b833a0d6846c570d35e7f3344d
-
SHA1
b095954830b51651520990b275220bf50cc89a4b
-
SHA256
57b2efd438bf6c7eb64a4a2d454f215361e2f96ac4bd50284b89c64742bc307a
-
SHA512
cac850af0eefa7d3aede5556f9b1d9ed0c70aebfd5518ac80a5966f7900cea32a76534ea303e6def62b1ec78a942622359be01562d7dbb9e44a7c74a2bac20c7
Malware Config
Targets
-
-
Target
SecuriteInfo.com.Trojan.GenericKD.46929464.6664.11196
-
Size
188KB
-
MD5
590459b833a0d6846c570d35e7f3344d
-
SHA1
b095954830b51651520990b275220bf50cc89a4b
-
SHA256
57b2efd438bf6c7eb64a4a2d454f215361e2f96ac4bd50284b89c64742bc307a
-
SHA512
cac850af0eefa7d3aede5556f9b1d9ed0c70aebfd5518ac80a5966f7900cea32a76534ea303e6def62b1ec78a942622359be01562d7dbb9e44a7c74a2bac20c7
Score10/10-
Buer
Buer is a new modular loader first seen in August 2019.
-
Executes dropped EXE
-
Loads dropped DLL
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-