Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

61feca446a...b5.exe

windows7_x64

10

61feca446a...b5.exe

windows10_x64

10

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-en-20211104
  • submitted
    28/11/2021, 21:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    61feca446ab393ad4a1ccbb92623ee847b08862ef4b6cac5ff2b0c0976abc6b5.exe

  • Size

    657KB

  • MD5

    ef93f30fe316bfdaacd4076b59b6e804

  • SHA1

    0bfe39ff3250d91c890b50895b4612f3eac5bf4a

  • SHA256

    61feca446ab393ad4a1ccbb92623ee847b08862ef4b6cac5ff2b0c0976abc6b5

  • SHA512

    ad033691cc215c13ee2fb18adc82f3f90dfe0b51088588c630955436d36980d570acae0d45500e073e71cf556b37c20a40e6505983a2026fbe6a03ecb40d9b49

Score
10/10
buerloader

Malware Config

Extracted

Family

buer

C2

https://mesoplano.com/

https://banusle.top/

Signatures

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer
  • Buer Loader 1 IoCs

    Detects Buer loader in memory or disk.

Processes

  • C:\Users\Admin\AppData\Local\Temp\61feca446ab393ad4a1ccbb92623ee847b08862ef4b6cac5ff2b0c0976abc6b5.exe
    "C:\Users\Admin\AppData\Local\Temp\61feca446ab393ad4a1ccbb92623ee847b08862ef4b6cac5ff2b0c0976abc6b5.exe"
    1⤵
      PID:592

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/592-55-0x0000000075981000-0x0000000075983000-memory.dmp

      Filesize

      8KB

      Download

    • memory/592-56-0x0000000000230000-0x0000000000231000-memory.dmp

      Filesize

      4KB

      Download

    • memory/592-57-0x0000000000260000-0x000000000026C000-memory.dmp

      Filesize

      48KB

      Download