Analysis
- max time kernel
61s - max time network
129s - platform
windows10-2004_x64 - resource
win10v2004-20220310-en - submitted
09/03/2022, 13:23
General
- Target f0d5752306469bc4c8f76bf5de66d43a78bc8d027827dfb12d032b2b5522dcdb.exe
- Size 153KB
- Sample220309-qmt38abdfm
- SHA256 f0d5752306469bc4c8f76bf5de66d43a78bc8d027827dfb12d032b2b5522dcdb
Score
10/10
Malware Config
Extracted
Family
-
buer
C2
-
officewestunionbank.com
-
bankcreditsign.com
Signatures
- Buer
Buer is a new modular loader first seen in August 2019.
- Buer Loader 2 IoCs
Detects Buer loader in memory or disk.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f0d5752306469bc4c8f76bf5de66d43a78bc8d027827dfb12d032b2b5522dcdb.exe"C:\Users\Admin\AppData\Local\Temp\f0d5752306469bc4c8f76bf5de66d43a78bc8d027827dfb12d032b2b5522dcdb.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4764-134-0x0000000000599000-0x000000000059F000-memory.dmp
memory/4764-135-0x0000000000599000-0x000000000059F000-memory.dmp
memory/4764-136-0x0000000000460000-0x0000000000467000-memory.dmp
memory/4764-137-0x0000000040000000-0x00000000400CF000-memory.dmp