Extracted

• • Target

    b95fe75736d19887ae4e3516c5cd9c7fa7caf763a138794f9aaecdee8d37f0b0

  • Size

    207KB

  • MD5

    dd5ecbbdd7c8ca66d7b3f8d524855e9c

  • SHA1

    2d46c394a5c4722e7fccfd3bc92636b5a0b6fbec

  • SHA256

    b95fe75736d19887ae4e3516c5cd9c7fa7caf763a138794f9aaecdee8d37f0b0

  • SHA512

    964d717a45c287d9b7e06d6bd21272021071f8fdfb835f5c79f2b422b3e3035bc37722a5fcb4ae830bb9a9eeea656fa0cf734de87c60da89fd5593265470eb8e

  Score

  10^/10

  buerloaderpersistence

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer

  • Modifies WinLogon for persistence

    persistence

  • Buer Loader

    Detects Buer loader in memory or disk.

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2