Extracted

• • Target

    211ddc016588fbbf96534c95de2b9c4f48d15ee89e45ddd647a7316497f80ff5

  • Size

    33KB

  • MD5

    ccf7d3adb21dfd77bf7f60e4a4751d1e

  • SHA1

    093757c4099cd0cd2bd1e7a0f4d64b78754888b9

  • SHA256

    211ddc016588fbbf96534c95de2b9c4f48d15ee89e45ddd647a7316497f80ff5

  • SHA512

    109923ef9c06016a0e376b862b88e415a4943fecbe907687751abd604d4d052987029cea9e5b5b165ec694c468b2491c8063787e073522e1813ff20907ae6936

  Score

  10^/10

  buerloaderpersistence

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer

  • Modifies WinLogon for persistence

    persistence

  • Buer Loader

    Detects Buer loader in memory or disk.

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2