General

  • Target

    e23246d5a16fd344dfd2fc7177d43890_JaffaCakes118

  • Size

    3.2MB

  • Sample

    240915-lqxlasxcmb

  • MD5

    e23246d5a16fd344dfd2fc7177d43890

  • SHA1

    9d0ee3d8896911c2743ff89c72c30639f0851f52

  • SHA256

    f4f02f78b8d89ed5063773985d4ad7b4c9205417b34787fb945f739134a85a8b

  • SHA512

    01d4b4c0c60272759906f3c2d255a0378c9b4c081878866c9beef187a8c58b53d7da50109541f2da3051035e72b7a60b54710d6e3cddd01a28eb1009bc6af1ed

  • SSDEEP

    49152:GYRxMUVRngWxp5Czu06spJDJXv2Suyic6346LE3Vtj2RwA+M:GuS0RnNYss5XvMy0346g3emA

Malware Config

Extracted

Family

buer

C2

complexofferstobakn.com

Targets

    • Target

      e23246d5a16fd344dfd2fc7177d43890_JaffaCakes118

    • Size

      3.2MB

    • MD5

      e23246d5a16fd344dfd2fc7177d43890

    • SHA1

      9d0ee3d8896911c2743ff89c72c30639f0851f52

    • SHA256

      f4f02f78b8d89ed5063773985d4ad7b4c9205417b34787fb945f739134a85a8b

    • SHA512

      01d4b4c0c60272759906f3c2d255a0378c9b4c081878866c9beef187a8c58b53d7da50109541f2da3051035e72b7a60b54710d6e3cddd01a28eb1009bc6af1ed

    • SSDEEP

      49152:GYRxMUVRngWxp5Czu06spJDJXv2Suyic6346LE3Vtj2RwA+M:GuS0RnNYss5XvMy0346g3emA

    • Buer

      Buer is a new modular loader first seen in August 2019.

    • Buer Loader

      Detects Buer loader in memory or disk.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v15

Tasks