Extracted

• • Target

    91d1851a7dfd2133102df6f58b34823726796744e62f61e4181b977026b19d6b_JC.exe

  • Size

    326KB

  • MD5

    8330ee5e6df29bdb94e65f2c93e3da24

  • SHA1

    8b5d4da807717806579cc9dc117f8a91f75154ec

  • SHA256

    91d1851a7dfd2133102df6f58b34823726796744e62f61e4181b977026b19d6b

  • SHA512

    1cdad334545c2eec3ab6b1a9ac1e12c4b358bf863eae96ababe6bdc6c6706ce0a20e16b6bb20d94247477c0c6ba93a94572adf5305dd5b7fca09dbcfa6830ed6

  • SSDEEP

    1536:QRhmabwrFnOATLZ+ZlDD4444444444444444444444444444444444444444444x:CupU1Wg8sZ/FXdVi3F6T6qo

  Score

  10^/10

  buerloaderpersistence

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer

  • Modifies WinLogon for persistence

    persistence

  • Buer Loader

    Detects Buer loader in memory or disk.

    loader

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2