Extracted

Extracted

• • Target

    zrmbk.exe

  • Size

    97KB

  • MD5

    9168378e6849f1547829afc3f0357f6a

  • SHA1

    097d64d174b8243434f026f2fd24e536cc3686bc

  • SHA256

    d333192a262ceaec75b68c0e6082cf868eb77a0e81010f590451814770b6ce31

  • SHA512

    4c69f85af810334506dd1b8d2e409e30ce8c8471073b56bece6312dcda109705720c41255d49e1d7976b847f4ca586113208fdec805aac2398fc890fc230754b

  Score

  10^/10

  buerraccoonfbb3ff62285b6085836cfe3d032d817936c927a9loaderstealer

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Buer Loader

    Detects Buer loader in memory or disk.

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2