Overview

overview

10

Static

static

3

wpjq2.exe

windows7-x64

10

wpjq2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38edb51ad2b46b0ec62158823f0412d8_JaffaCakes118

  • Size

    85KB

  • Sample

    240711-nk8sgsvaml

  • MD5

    38edb51ad2b46b0ec62158823f0412d8

  • SHA1

    f4451b6925326a5f9654e04dc9917eda6c2680bd

  • SHA256

    69fe5777f51da82b6fd373493286b70d2654e95e233d79b3895ac040497e657a

  • SHA512

    c37829a0314fdc8aed1c307f1a3d73ec0ba087e7b6f7a085349a5f74880b7e62a4380636784556f180233e654842e24436376357d883140d377af6e59f0db6e6

  • SSDEEP

    1536:7FQiSBxCY3ylGtOvzkWEBU9pzjSXQDFQCV1UsF5W8S8V7iEdf3pCAffE:QBxCDvzkTBU3SgK/sF5W8JtfpDffE

Score
10/10
buerloader

Malware Config

Extracted

Family

buer

C2

officewestunionbank.com

bankcreditsign.com

Targets

    • Target

      wpjq2.bin

    • Size

      143KB

    • MD5

      09f6608d35fbac4f570461731fc2a7bc

    • SHA1

      6bcfc6efb1d027f4f8e6ed2af76b1cfbad0011be

    • SHA256

      be7578bac51d8aa3de55c4dceb0a622b1dce54636e8bad9d3c5d79c676d980f8

    • SHA512

      8d73cd8c96fb188e879a533844cf9266e48ef72b34f1ba15cf51f649c9f693d4b0fbd3f6a1c7b6f3534f68764cf380f8c54611d608fb6b07f2e05b22cd4e7653

    • SSDEEP

      3072:3p7An3WHVM+/LpdZhiZGEbDJr7bxIyb9qb:ZEmHqOLpdZhivrn9E

    Score
    10/10
    buerloader

    • Buer

      Buer is a new modular loader first seen in August 2019.

      loaderbuer

    • Buer Loader

      Detects Buer loader in memory or disk.

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks