Extracted

• • Target

    070d785aab37f9ac742f0c5ad255be4d46147ae9917960058fe5846a2e2e1083

  • Size

    38KB

  • MD5

    d91043ee270758fbc29613e993cf17a6

  • SHA1

    bf3baf3e2d446f65b14d310e0e0a79d4002f9c03

  • SHA256

    070d785aab37f9ac742f0c5ad255be4d46147ae9917960058fe5846a2e2e1083

  • SHA512

    1b8daad67e37e02835666acb1a815baccd235f955c95cf34bb28a9f4301eae32767919c1a473614da61ff7c0c0e646ac04317145228d6c57f02f3a0e55535000

  Score

  10^/10

  buerloaderpersistence

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer

  • Modifies WinLogon for persistence

    persistence

  • Buer Loader

    Detects Buer loader in memory or disk.

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2