General

  • Target

    7cf42b86ce5e7da39da70e7a4ec975cb6c3688201cf4160033c3ead411114b3b

  • Size

    297KB

  • Sample

    220731-lvxrvsaee7

  • MD5

    93635db616729ba0c3b625e46e91df4c

  • SHA1

    452e4f91c12052852bb20649734a917f4360a810

  • SHA256

    7cf42b86ce5e7da39da70e7a4ec975cb6c3688201cf4160033c3ead411114b3b

  • SHA512

    c3bd159c1a4cce8e6ff3190453cebea30e24579738403ed17c1f3984df7c6502f66f14901df7ac5767f8aa61b42a2f7d60fbc22eeb4912e55ceb6c727ad7f309

Score
10/10

Malware Config

Extracted

Family

buer

C2

http://koralak.hk/

Targets

    • Target

      7cf42b86ce5e7da39da70e7a4ec975cb6c3688201cf4160033c3ead411114b3b

    • Size

      297KB

    • MD5

      93635db616729ba0c3b625e46e91df4c

    • SHA1

      452e4f91c12052852bb20649734a917f4360a810

    • SHA256

      7cf42b86ce5e7da39da70e7a4ec975cb6c3688201cf4160033c3ead411114b3b

    • SHA512

      c3bd159c1a4cce8e6ff3190453cebea30e24579738403ed17c1f3984df7c6502f66f14901df7ac5767f8aa61b42a2f7d60fbc22eeb4912e55ceb6c727ad7f309

    Score
    10/10
    • Buer

      Buer is a new modular loader first seen in August 2019.

    • Buer Loader

      Detects Buer loader in memory or disk.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks