Analysis
-
max time kernel
141s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
11-07-2024 11:28
General
-
Target
wpjq2.exe
-
Size
143KB
-
MD5
09f6608d35fbac4f570461731fc2a7bc
-
SHA1
6bcfc6efb1d027f4f8e6ed2af76b1cfbad0011be
-
SHA256
be7578bac51d8aa3de55c4dceb0a622b1dce54636e8bad9d3c5d79c676d980f8
-
SHA512
8d73cd8c96fb188e879a533844cf9266e48ef72b34f1ba15cf51f649c9f693d4b0fbd3f6a1c7b6f3534f68764cf380f8c54611d608fb6b07f2e05b22cd4e7653
-
SSDEEP
3072:3p7An3WHVM+/LpdZhiZGEbDJr7bxIyb9qb:ZEmHqOLpdZhivrn9E
Score
10/10
Malware Config
Extracted
Family
buer
C2
officewestunionbank.com
bankcreditsign.com
Signatures
-
Buer
Buer is a new modular loader first seen in August 2019.
-
Buer Loader 4 IoCs
Detects Buer loader in memory or disk.
Processes
-
C:\Users\Admin\AppData\Local\Temp\wpjq2.exe"C:\Users\Admin\AppData\Local\Temp\wpjq2.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
28KB
-
Filesize
36KB
-
Filesize
43.6MB
-
Filesize
28KB
-
Filesize
1024KB