General

  • Target

    54e173cc3274e55ea57175674c90bf6e5a60ebadbdd24060ea20895cbb41a007

  • Size

    145KB

  • Sample

    220725-wbfdksggd3

  • MD5

    32727549bc10db5a9c37ef9245749cbd

  • SHA1

    780936ffdb86885dacb3a32c653bfb25be0a7e09

  • SHA256

    54e173cc3274e55ea57175674c90bf6e5a60ebadbdd24060ea20895cbb41a007

  • SHA512

    df6b63d9da7d7ab1f1d933a65dc64413bd67f563186bdcc7bb0bab9e256a48017890d2851d4fa8e04f1c0d04a59feff49c3c87123a0b65c62ea37ca005ab8966

Score
10/10

Malware Config

Extracted

Family

buer

C2

questbankcustoms.com

Targets

    • Target

      Invoice_82915.exe

    • Size

      159KB

    • MD5

      873a420c04260087b84bb5a0e1422925

    • SHA1

      565fa4974e818681989f766b5b9c267a68872968

    • SHA256

      eab3c05e80d1b66bd2d3ed7cfa86ae7ae38ed565bc6b48ae208bb2c61083a106

    • SHA512

      5e7202ca7e8dd575e7da4877468fe60d500b0a836820dfdfbef30adcd24bba50a8aa3527663ef3be25eb2bd16c953281bbedf3359be0fe4435c9d3b76b421431

    Score
    10/10
    • Buer

      Buer is a new modular loader first seen in August 2019.

    • Buer Loader

      Detects Buer loader in memory or disk.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks