Buer Loader
Loader malware
Source Attribution
- Origin
- MITRE
- Source
- Researchers
- Verified
- 2026-08-26T16:11:50.351Z
- Confidence
- high
Source: Researchers · Verified: 2026-08-26T16:11:50.351Z · Confidence: high
Security Timeline
- discovered Buer Loader first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
Buer is a loader distributed via malspam to deliver Cobalt Strike and ransomware access. (attributes recorded from Researchers).
Definition
Buer is a loader distributed via malspam to deliver Cobalt Strike and ransomware access.
Overview
Buer is a loader distributed via malspam to deliver Cobalt Strike and ransomware access.
Behavior
- Dropper to Cobalt Strike/ransomware
First Seen
2019-07
Target
Loader malware
Malware Intelligence
Family: Buer Loader
Techniques: T1566, T1105
Targets: Loader malware
Behavior:
- Dropper to Cobalt Strike/ransomware
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.