Analysis
-
max time kernel
162s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-en-20220113 -
submitted
24-03-2022 09:51
Static task
static1
Behavioral task
behavioral1
Sample
faa12e0d9880f402976d0bb6372e0699e7374f58a406d62840e373831d956b8d.exe
Resource
win7-20220310-en
windows7_x64
0 signatures
0 seconds
General
-
Target
faa12e0d9880f402976d0bb6372e0699e7374f58a406d62840e373831d956b8d.exe
-
Size
288KB
-
MD5
67ddb94deaeb47edc5d7457be54fad31
-
SHA1
1145793179ee3496c5cf6f1005d1db535d70bf69
-
SHA256
faa12e0d9880f402976d0bb6372e0699e7374f58a406d62840e373831d956b8d
-
SHA512
ec5bc51eee78d09eae3d4e93a7f2d5309440113a488b380485204814b48a3e9ac46a8f541f1dfbaafc2a05b436b38cf46f7924f5fb2d2d3dc9e8d345f8d0ca53
Malware Config
Extracted
Family
buer
C2
officewestunionbank.com
bankcreditsign.com
Signatures
-
resource yara_rule behavioral2/memory/2680-131-0x0000000000760000-0x0000000000767000-memory.dmp buer behavioral2/memory/2680-132-0x0000000040000000-0x00000000407B4000-memory.dmp buer