Overview

overview

10

Static

static

0374bb627e...71.dll

windows7_x64

10

0374bb627e...71.dll

windows10-2004_x64

10

0ba117fd39...35.exe

windows7_x64

10

0ba117fd39...35.exe

windows10-2004_x64

10

196c17a866...fe.exe

windows7_x64

10

196c17a866...fe.exe

windows10-2004_x64

10

1e0215f67f...53.exe

windows7_x64

10

1e0215f67f...53.exe

windows10-2004_x64

10

25d04d6314...de.exe

windows7_x64

10

25d04d6314...de.exe

windows10-2004_x64

10

428ff553b6...50.exe

windows7_x64

10

428ff553b6...50.exe

windows10-2004_x64

10

455d08a5e2...ce.exe

windows7_x64

10

455d08a5e2...ce.exe

windows10-2004_x64

10

4dbd0cd1e0...59.dll

windows7_x64

10

4dbd0cd1e0...59.dll

windows10-2004_x64

10

4febaf5c3e...92.exe

windows7_x64

10

4febaf5c3e...92.exe

windows10-2004_x64

10

5282f373b4...ff.exe

windows7_x64

9

5282f373b4...ff.exe

windows10-2004_x64

9

6c2e494f16...47.exe

windows7_x64

10

6c2e494f16...47.exe

windows10-2004_x64

10

6c95be6a53...65.exe

windows7_x64

10

6c95be6a53...65.exe

windows10-2004_x64

10

75a5b0e0e9...1a.exe

windows7_x64

10

75a5b0e0e9...1a.exe

windows10-2004_x64

10

7dd89cf8a1...d2.exe

windows7_x64

10

7dd89cf8a1...d2.exe

windows10-2004_x64

10

81fa8a3bdc...77.exe

windows7_x64

10

81fa8a3bdc...77.exe

windows10-2004_x64

10

9268e1f0af...b0.dll

windows7_x64

10

9268e1f0af...b0.dll

windows10-2004_x64

10

Analysis

  • max time kernel
    51s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    20-06-2022 13:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7dd89cf8a1fd81909f2dd9b75cffa1f7ed98ae94c381a6c92ffd0a0dee7707d2.exe

  • Size

    196KB

  • MD5

    dd69fb6eb36fd0b9d0e14e099104726a

  • SHA1

    6fb3cad9868b22a0563664d3c5cbefe7e57d09b2

  • SHA256

    7dd89cf8a1fd81909f2dd9b75cffa1f7ed98ae94c381a6c92ffd0a0dee7707d2

  • SHA512

    6743cac45032112bccf24bd0765f15727c7dd12a46e8162adc39c99631998f3b8b8544916ab398bbeaaa3704b65e8dd57b4f6dd8acaf1c933a2406e9525eacea

Score
10/10
buerloader

Malware Config

Extracted

Family

buer

C2

https://165.232.118.210/

Signatures

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer
  • Buer Loader 3 IoCs

    Detects Buer loader in memory or disk.

    loader

Processes

  • C:\Users\Admin\AppData\Local\Temp\7dd89cf8a1fd81909f2dd9b75cffa1f7ed98ae94c381a6c92ffd0a0dee7707d2.exe
    "C:\Users\Admin\AppData\Local\Temp\7dd89cf8a1fd81909f2dd9b75cffa1f7ed98ae94c381a6c92ffd0a0dee7707d2.exe"
    1⤵
      PID:888

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/888-54-0x00000000755C1000-0x00000000755C3000-memory.dmp

      Filesize

      8KB

      Download

    • memory/888-55-0x00000000003C0000-0x00000000003CF000-memory.dmp

      Filesize

      60KB

      Download

    • memory/888-59-0x0000000040000000-0x000000004000C000-memory.dmp

      Filesize

      48KB

      Download

    • memory/888-62-0x00000000003B0000-0x00000000003BD000-memory.dmp

      Filesize

      52KB

      Download