Extracted

• • Target

    f724eba1eb4aa6f01d8c425de2a73a672a14f71693f5bfe888ca812da2f62302

  • Size

    426KB

  • MD5

    9b50709ccd111098595b0b1327b9ef7f

  • SHA1

    e1d64b6cdde3701efaef984f96502f38a3569470

  • SHA256

    f724eba1eb4aa6f01d8c425de2a73a672a14f71693f5bfe888ca812da2f62302

  • SHA512

    f8ede1263371c284da008f332625b3ca96a39e6dca6219c300562b4884da89ad2b9ed6704aac0555fa941fe7c95c7bbc2fcd5a75e1e08771103ca89df8c744ac

  • SSDEEP

    6144:c8dKpMruUnJYAQk/Gsd0mAFcQpPtzGhw2/K6786TEnCAIpi9MxipEl7BuHBTpOde:lKpMRYA7d0jTj4MbGv0E9OH

  Score

  10^/10

  buerloaderpersistence

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer

  • Buer Loader

    Detects Buer loader in memory or disk.

    loader

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2