Extracted

• • Target
    d40759d2ed609177ea3ea9c91a72f7c17215818f9a7a930266c17790c377fc95N.exe
  • Size 96KB
  • SHA256 d40759d2ed609177ea3ea9c91a72f7c17215818f9a7a930266c17790c377fc95
  • MD5 12be52aa6dcf67a67f2635ee1edab860
  • SHA1 50310583011adaa81b523a130380d63797482ef9
  • SHA512 36473350bb9cc05affe953098df8b50e1557540b31a792b7dde35bd4da568fc0d9bb05a58efa33089fc24985a42ee1eba6662fa1d4da7170242332dbd20e89ab
  • SSDEEP 1536:/KJMiPGLTHP5FYMnZWV22LFN7RZObZUUWaegPYAi:/KJMZHhFjmXClUUWae3
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2