2021-03-05 Buerloader IOCs

THREAT IDENTIFIUCATION:  BUERLOADER

SUBJECTS OBSERVED
order 3097251 Parcel
order 5665544 Parcel

SENDERS OBSERVED
[email protected]
[email protected]

BUERLOADER MALDOC FILE HASHES
Private Document.jnlp
836a3e54d26aabc92c8dc6a623fef690

BUERLOADER PAYLOAD DOWNLOAD
http://grandbanking-api.com/v4/54bb721a-ce6e-4b6b-a99b-a2a1d84bf3b6us--

BUERLOADER PAYLOAD FILE HASHES
N/A

BUERLOADER C2
N/A

SUPPORTING EVIDENCE
https://app.any.run/tasks/dddac612-ad00-44ec-99f7-38c1cd685a13/