Extracted

• • Target

    34a265918707295e17ab9d30e1a1e42518d908fe9d7cd59537e0d249541898c9N

  • Size

    96KB

  • MD5

    ea3fc0ea3a3704fb229e17d7396562e0

  • SHA1

    ac07ebe8b5110c37911b27dcd3a7579c3f6419b8

  • SHA256

    34a265918707295e17ab9d30e1a1e42518d908fe9d7cd59537e0d249541898c9

  • SHA512

    84639c777c73dc5aee3614311005b1a3c907fedeaf2f623fcc2ace4e9a31163bab32dcdb4818a8496047a2bcb83d6681f836b2be8a809e7dca935bd7bed0eb7e

  • SSDEEP

    1536:fXr2nYSfp6ta+yLN0vg3Fun/rG2LcV7RZObZUUWaegPYA:fyYJta+60vf/rr0ClUUWae

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2