General

  • Target

    874645b953560f0016f252f49f008b125d29ee1db139a8b2603d4f63eb5f5d43

  • Size

    31KB

  • Sample

    220625-nen6wsccd3

  • MD5

    f718a59cfa511acd0487c15785410075

  • SHA1

    71920c16526ef5cf41a35d3dbc4d17a6766f61b2

  • SHA256

    874645b953560f0016f252f49f008b125d29ee1db139a8b2603d4f63eb5f5d43

  • SHA512

    a6c995c6ecb251a7159af13bcc76d4beb0e10e166177eb9b42ba547d2b68c7cbaffec7a0a00ad2a1744a366848151582b043fb8ddba53aca00a768f5b4e3968f

Score
10/10

Malware Config

Extracted

Family

buer

C2

frrn8--_tgp_qsnnmpr,gldm86.6.-

http://avirasupport.info:8080/

eqqm7,,^sfo^prmmloq+fkcl75-5-,

Targets

    • Target

      874645b953560f0016f252f49f008b125d29ee1db139a8b2603d4f63eb5f5d43

    • Size

      31KB

    • MD5

      f718a59cfa511acd0487c15785410075

    • SHA1

      71920c16526ef5cf41a35d3dbc4d17a6766f61b2

    • SHA256

      874645b953560f0016f252f49f008b125d29ee1db139a8b2603d4f63eb5f5d43

    • SHA512

      a6c995c6ecb251a7159af13bcc76d4beb0e10e166177eb9b42ba547d2b68c7cbaffec7a0a00ad2a1744a366848151582b043fb8ddba53aca00a768f5b4e3968f

    Score
    10/10
    • Buer

      Buer is a new modular loader first seen in August 2019.

    • Buer Loader

      Detects Buer loader in memory or disk.

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks