Overview

overview

10

Static

static

3

e8132f4216...cN.exe

windows7-x64

10

e8132f4216...cN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8132f4216a1dd3211fc8526c87079b71b571c7bd474771aceebc6f5813fd0acN

  • Size

    59KB

  • Sample

    241108-h5zsesxlhs

  • MD5

    95ff89d4bebe6b3b222f96a15f231340

  • SHA1

    1ae464fb184848ca80e5501ae982253443635dbc

  • SHA256

    e8132f4216a1dd3211fc8526c87079b71b571c7bd474771aceebc6f5813fd0ac

  • SHA512

    4bfe67c7b938e4025bfc2a4e9dccb78278c820715a8e0dafbd4f89deffab27a5e82608b5275d35d5a90d46d08518942a139c0b4e6283e6db6c2c30a8fde88dff

  • SSDEEP

    768:50YDY2KY6knIwuB5LvqCrGI9+I9fN/9th+RiBessreM5EZ/1H595nf1fZMEBFELE:BWEvuB5bVNkKV1gEeNahNCyVso

Score
10/10
berbewbruteratelbackdoordiscoverypersistence

Malware Config

Targets

    • Target

      e8132f4216a1dd3211fc8526c87079b71b571c7bd474771aceebc6f5813fd0acN

    • Size

      59KB

    • MD5

      95ff89d4bebe6b3b222f96a15f231340

    • SHA1

      1ae464fb184848ca80e5501ae982253443635dbc

    • SHA256

      e8132f4216a1dd3211fc8526c87079b71b571c7bd474771aceebc6f5813fd0ac

    • SHA512

      4bfe67c7b938e4025bfc2a4e9dccb78278c820715a8e0dafbd4f89deffab27a5e82608b5275d35d5a90d46d08518942a139c0b4e6283e6db6c2c30a8fde88dff

    • SSDEEP

      768:50YDY2KY6knIwuB5LvqCrGI9+I9fN/9th+RiBessreM5EZ/1H595nf1fZMEBFELE:BWEvuB5bVNkKV1gEeNahNCyVso

    Score
    10/10
    berbewbackdoordiscoverypersistencebruteratel

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Berbew family

      berbew

    • Brute Ratel C4

      A customized command and control framework for red teaming and adversary simulation.

      backdoorbruteratel

    • Bruteratel family

      bruteratel

    • Detect BruteRatel badger

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks