Extracted

• • Target

    0c09ea2d5722a2484804bf8c4f051d66d8a95d23c19e5d1277a55cafd80b67be

  • Size

    128KB

  • MD5

    f35cd516f71e2cc4ade549a6487624ca

  • SHA1

    64800a2f85e12090eea5109e05d969a08ae9850a

  • SHA256

    0c09ea2d5722a2484804bf8c4f051d66d8a95d23c19e5d1277a55cafd80b67be

  • SHA512

    866a549f65cc25c73b0087cf1fd769446f1d82aa38b24e211f6e517b481c02ee3d607055aaeab6be199a42e50f917920675f4c5079e7cf83606154165bdbb3fb

  Score

  10^/10

  buerloaderpersistence

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer

  • Modifies WinLogon for persistence

    persistence

  • Buer Loader

    Detects Buer loader in memory or disk.

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2