buer | 2325707f6f6291666c82cfd5edf8a49b9918e266e05be034b923c6442c503c94 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
2325707f6f6291666c82cfd5edf8a49b9918e266e05be034b923c6442c503c94
Size 1.1MB
Sample210411-j8l6lpyden
SHA256 2325707f6f6291666c82cfd5edf8a49b9918e266e05be034b923c6442c503c94
MD5 652757d5046ae6a09367c5e49f6c8867
SHA1 d212c3f6032698d9ec33da18ed81365b0285ba03
SHA512 93e5e3dbd4cf88c825025f6119de93a22ee30ae897ae7b9e5e987b52dedf2fb2ca66ce58c34bfb6cda7ceb28312040ce7d1fcc4e5f60c497958da3a2d2c036ca
MD5 SHA1 SHA512

Score

10^/10

vmprotect BuerLoader buer

Malware Config

Signatures

Buer Loader 1 IoCs

Detects Buer loader in memory or disk.

resource	yara_rule
sample	buer

Buer family
buer

win_buer_w0 1 IoCs

Detects buer payload in memory.

resource	yara_rule
sample	win_buer_w0

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

resource	yara_rule
sample	vmprotect

File Explorer

2325707f6f6291666c82cfd5edf8a49b9918e266e05be034b923c6442c503c94

.exe 1.1MB

2325707f6f6291666c82cfd5edf8a49b9918e266e05be034b923c6442c503c94

SHA256 2325707f6f6291666c82cfd5edf8a49b9918e266e05be034b923c6442c503c94
MD5 652757d5046ae6a09367c5e49f6c8867
SHA1 d212c3f6032698d9ec33da18ed81365b0285ba03
SHA512 93e5e3dbd4cf88c825025f6119de93a22ee30ae897ae7b9e5e987b52dedf2fb2ca66ce58c34bfb6cda7ceb28312040ce7d1fcc4e5f60c497958da3a2d2c036ca
MD5 SHA1 SHA512

windows x86

Buer Loader

Detects Buer loader in memory or disk.
win_buer_w0

Detects buer payload in memory.

BuerLoader
VMProtect packed file

Detects executables packed with VMProtect commercial packer.

vmprotect