Extracted

• • Target

    6f9d943f88f715ff8a122d7b88af986c1a9f38f4484e48cde768cf22a5935efe

  • Size

    29KB

  • MD5

    390a4902b4759094424ae7317d90f921

  • SHA1

    eda0909abe6fe5ca4564d913a8c6835d87d81255

  • SHA256

    6f9d943f88f715ff8a122d7b88af986c1a9f38f4484e48cde768cf22a5935efe

  • SHA512

    e3ecab7024923a3bec8910652657c73e11047f1b2522bd043d061a5be2e2f80a6ad62d65596652065ec5f8b3c48a0389af47415edc42cab225295dc953cf51c2

  Score

  10^/10

  rustybuerloader

  • RustyBuer

    RustyBuer is a new variant of Buer loader written in Rust.

    loaderrustybuer

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2