Extracted

• • Target

    1c6852799eabf0c9e744016a3113af6d1185c3de41acdbf90c95297d252d01f9

  • Size

    144KB

  • MD5

    37d8bced898bf955130f39645eba3f0a

  • SHA1

    c411ffa43ad7cf7bf321017e9a2d7d9bae1f0cf5

  • SHA256

    1c6852799eabf0c9e744016a3113af6d1185c3de41acdbf90c95297d252d01f9

  • SHA512

    1ae8c515a0a820552c8861fdde197dee0ea0f7fabae74ee4fac9c345f0e1dadf5448b0787cbedfa9e960980419dd3f59fbb8cae8da84df74283348ac80554eaa

  Score

  10^/10

  buerloaderpersistence

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer

  • Modifies WinLogon for persistence

    persistence

  • Buer Loader

    Detects Buer loader in memory or disk.

    loader

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2