Analysis

  • max time kernel
    151s
  • max time network
    158s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    05-02-2022 15:51

General

  • Target

    523bf45e4e7511b39fc1b016741a8f34f7356e7786ea6078c7b96024dd1ba4e4.exe

  • Size

    130KB

  • MD5

    d4328584a7563adcb63e6ae0e3ca99c2

  • SHA1

    9f45948032792f3c2e6c1078cd33f076835ec690

  • SHA256

    523bf45e4e7511b39fc1b016741a8f34f7356e7786ea6078c7b96024dd1ba4e4

  • SHA512

    fd1ab532d85cca8954f78894d6d91d6de3bd29d1ad2c1e22a0c04b4e48712a6923a5f91559d0cb0e0a20ead60848602824be2bfd47569c954bc56e7c27694efc

Score
10/10

Malware Config

Extracted

Family

buer

C2

https://190.14.37.34/

Signatures

  • Buer

    Buer is a new modular loader first seen in August 2019.

  • Buer Loader 2 IoCs

    Detects Buer loader in memory or disk.

Processes

  • C:\Users\Admin\AppData\Local\Temp\523bf45e4e7511b39fc1b016741a8f34f7356e7786ea6078c7b96024dd1ba4e4.exe
    "C:\Users\Admin\AppData\Local\Temp\523bf45e4e7511b39fc1b016741a8f34f7356e7786ea6078c7b96024dd1ba4e4.exe"
    1⤵
      PID:2004

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2004-55-0x00000000003F0000-0x0000000000413000-memory.dmp

      Filesize

      140KB

    • memory/2004-56-0x0000000000220000-0x0000000000229000-memory.dmp

      Filesize

      36KB

    • memory/2004-57-0x0000000076731000-0x0000000076733000-memory.dmp

      Filesize

      8KB

    • memory/2004-58-0x0000000040000000-0x00000000442B9000-memory.dmp

      Filesize

      66.7MB