Extracted

• • Target

    7f761b5ad46f068abff2d5ee3d1f1db94f430946716b37b7683b329001accd7dN

  • Size

    59KB

  • MD5

    7cfc4576b5f1f4dea6b86ab2cadfd5f0

  • SHA1

    a20fe452361ccbcaf64d6e68a644c0763348d32f

  • SHA256

    7f761b5ad46f068abff2d5ee3d1f1db94f430946716b37b7683b329001accd7d

  • SHA512

    0997d50ccd72e8eee248c9a1d40bb1a80bfa3f6a35054c533812b8a02d7fd327d8f16ef77a035007a6ac9aa175fc3c5e9947493a69ac7147cfd0308fbe402c71

  • SSDEEP

    768:xy14L7M93+2MYn4kexDE5NuNz/nr8Hf/DqZ4O7/maZ/1H5Q5nf1fZMEBFELvkVgD:xo42MYnBEDE5NuNk/Fw2NCyVs

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2