Extracted

• • Target

    4e2a2755b00b276e03677a1444df7317bef390529fa774f9999f907cbce73157

  • Size

    252KB

  • MD5

    91b6202963740e3e9649a14e6a129533

  • SHA1

    16e35c52fc3ac675eadd7c12a13cbc6419c4a0c1

  • SHA256

    4e2a2755b00b276e03677a1444df7317bef390529fa774f9999f907cbce73157

  • SHA512

    c7c71805a32d8d951b7cb60aa0a722995e3abc0d50107688953bf0c2df06a314b150bebdb3208c8bdb6b60d654c16ff3dcfe03fab34d6adfbb62f6abfdc23f80

  Score

  10^/10

  buerloaderpersistence

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer

  • Modifies WinLogon for persistence

    persistence

  • Buer Loader

    Detects Buer loader in memory or disk.

    loader

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2