buer | 1e05cdf0f79859175a6a0193df2ac17f008ed7fdbd25c00af0325fc356cd8bee | Triage

Analysis

max time kernel
35s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
02-05-2022 18:26

Sharing

Report Analysis Logs

General

Target

1e05cdf0f79859175a6a0193df2ac17f008ed7fdbd25c00af0325fc356cd8bee.exe
Size

121KB
MD5

bea104650104fce23536a1a0bc8a8f0b
SHA1

c380ef0e64c9d43e1ba800bca61172511f94144a
SHA256

1e05cdf0f79859175a6a0193df2ac17f008ed7fdbd25c00af0325fc356cd8bee
SHA512

e23a45585b07d91b7a2d791a6b6a1801ceca2433b96f9c693df6f1a9df54279ec36b6e5472421e03f7a2db90da6200c0f123a19208d7bc59a0a002a6946f7e5d

Score

10^/10

buer loader

Malware Config

Extracted

Family

buer

C2

officewestunionbank.com

bankcreditsign.com

Signatures

Buer
Buer is a new modular loader first seen in August 2019.
loader buer

Buer Loader 2 IoCs

Detects Buer loader in memory or disk.

resource	yara_rule
behavioral1/memory/1936-55-0x0000000000020000-0x0000000000027000-memory.dmp	buer
behavioral1/memory/1936-56-0x0000000040000000-0x0000000044974000-memory.dmp	buer

C:\Users\Admin\AppData\Local\Temp\1e05cdf0f79859175a6a0193df2ac17f008ed7fdbd25c00af0325fc356cd8bee.exe
"C:\Users\Admin\AppData\Local\Temp\1e05cdf0f79859175a6a0193df2ac17f008ed7fdbd25c00af0325fc356cd8bee.exe"
1⤵
PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1936-55-0x0000000000020000-0x0000000000027000-memory.dmp

Filesize
28KB

Download
memory/1936-54-0x000000000028A000-0x0000000000290000-memory.dmp

Filesize
24KB

Download
memory/1936-56-0x0000000040000000-0x0000000044974000-memory.dmp

Filesize
73.5MB

Download