Extracted

• • Target

    47f6ca6bad3812abde610a5d9ee7d830a20cff27d16198626027446eaee513a7

  • Size

    160KB

  • MD5

    d8e4d911bd32bc0cec654270a195a86c

  • SHA1

    9f262bd7f6ca033eb3f03c6ce1e82d98005f28ad

  • SHA256

    47f6ca6bad3812abde610a5d9ee7d830a20cff27d16198626027446eaee513a7

  • SHA512

    f61bb004ac75ad3727822782547b0d183c9dc2b68215da867d9ce96257e29beadabc621a3c51f8be7e9538a3347b2723dcfcf9163826d18122525c098be3e61b

  Score

  10^/10

  buerloaderpersistencesuricata

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer

  • suricata: ET MALWARE Buer Loader Update Request

    suricata: ET MALWARE Buer Loader Update Request

    suricata

  • Buer Loader

    Detects Buer loader in memory or disk.

    loader

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2