Extracted

• • Target

    eresco.exe

  • Size

    4.7MB

  • MD5

    17b27ab5c49676aab24454868ca2adf7

  • SHA1

    47028b12aa1257421b096f55d9d1fc68f6b8f72b

  • SHA256

    5ac6766680c8c06a4b0b4e6a929ec4f5404fca75aa774f3eb986f81b1b30622b

  • SHA512

    2938b181c8b17a9cab48168439a89aa1b4f6f67634d9faeb80946795db31d84ceca3c550e9feae9c0f391cccce5c30195e87bf633a0a8e2309544f23cc55866c

  Score

  10^/10

  rustybuerloader

  • RustyBuer

    RustyBuer is a new variant of Buer loader written in Rust.

    loaderrustybuer

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2