Extracted

• • Target

    2025-03-24_c126134648ccd1408fb868b240d68695_

  • Size

    627KB

  • MD5

    c126134648ccd1408fb868b240d68695

  • SHA1

    693870838334230ea02d0606d253696567b8a669

  • SHA256

    d16e0cf61accda34b867910b529794f438a41231f9c2451f44e3dfdd83721ad3

  • SHA512

    c121a1d0d8940a1e10d7956f2628f28cf13c0d2b332be6b25ac5579ec64eb609e2b1f1dd5be5ee9f03e90a3ea0f9122d2154c16df22255ddf0f5deab23658f66

  • SSDEEP

    12288:GTTEy2R/8MnxERV8bpUt+AC0/KVFBMuwE:GTcRUVKpticFBM8

  Score

  10^/10

  buerdiscoveryexecutionloader

  • Buer

    Buer is a new modular loader first seen in August 2019.

    loaderbuer

  • Buer family

    buer

  • Buer Loader

    Detects Buer loader in memory or disk.

    loader

  • Command and Scripting Interpreter: PowerShell

    Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    execution

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2