Overview

overview

10

Static

static

9

ba900abbcc...3d.exe

windows7-x64

10

ba900abbcc...3d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba900abbccb3863cefc4aac31300eb3d

  • Size

    30KB

  • Sample

    231222-rh1wmsaed9

  • MD5

    ba900abbccb3863cefc4aac31300eb3d

  • SHA1

    61a6efdeffec38a278640b463fff35e3858e5173

  • SHA256

    9d596eb3d5080db81cda994198d5471fdb7a329f92e7a1f76ba7cac445542eec

  • SHA512

    ec6bfe690d74a919b49ad78fffae782ef07a3363a54260782d715f8b140f327ae637d6aca12cdd80410689450362b5631083789d94ed0e8c86935f3dfb422ce7

  • SSDEEP

    768:ygw75ZtkSZopNi5Q0hILkKF2kPYkrfl6qwINmSTT:ygw1ZopSvhIQKF28v96qwI02

Score
10/10
buerloaderminer

Malware Config

Targets

    • Target

      ba900abbccb3863cefc4aac31300eb3d

    • Size

      30KB

    • MD5

      ba900abbccb3863cefc4aac31300eb3d

    • SHA1

      61a6efdeffec38a278640b463fff35e3858e5173

    • SHA256

      9d596eb3d5080db81cda994198d5471fdb7a329f92e7a1f76ba7cac445542eec

    • SHA512

      ec6bfe690d74a919b49ad78fffae782ef07a3363a54260782d715f8b140f327ae637d6aca12cdd80410689450362b5631083789d94ed0e8c86935f3dfb422ce7

    • SSDEEP

      768:ygw75ZtkSZopNi5Q0hILkKF2kPYkrfl6qwINmSTT:ygw1ZopSvhIQKF28v96qwI02

    Score
    10/10
    buerloaderminer

    • Buer

      Buer is a new modular loader first seen in August 2019.

      loaderbuer

    • Detectes Phoenix Miner Payload

      miner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks