General

  • Target

    44dc7a78801f705233f20d4b37c0e8f72805a86418ba3fe786ec0b14a481cf07

  • Size

    276KB

  • Sample

    220707-wjlkkafgb9

  • MD5

    f112db5fe30ce25faac045d2eb5b9e14

  • SHA1

    346fa76565cb15beef5306466ad99be143f5a76f

  • SHA256

    44dc7a78801f705233f20d4b37c0e8f72805a86418ba3fe786ec0b14a481cf07

  • SHA512

    81e8b5f313b5ca4e4696ccb33a3381c24e57f2ce6700767c7e81db5579239d096ba24082cd429610eb6c91ad5cc3c4d9a786b6cd2178f0f8c25b1179efe9412f

Score
10/10

Malware Config

Extracted

Family

buer

C2

http://koralak.hk/

Targets

    • Target

      44dc7a78801f705233f20d4b37c0e8f72805a86418ba3fe786ec0b14a481cf07

    • Size

      276KB

    • MD5

      f112db5fe30ce25faac045d2eb5b9e14

    • SHA1

      346fa76565cb15beef5306466ad99be143f5a76f

    • SHA256

      44dc7a78801f705233f20d4b37c0e8f72805a86418ba3fe786ec0b14a481cf07

    • SHA512

      81e8b5f313b5ca4e4696ccb33a3381c24e57f2ce6700767c7e81db5579239d096ba24082cd429610eb6c91ad5cc3c4d9a786b6cd2178f0f8c25b1179efe9412f

    Score
    10/10
    • Buer

      Buer is a new modular loader first seen in August 2019.

    • Buer Loader

      Detects Buer loader in memory or disk.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks