Extracted

• • Target

    91f1e1015985fd5acec97d68f9abb65910228b4301174baff2787dfaf3584323N.exe

  • Size

    96KB

  • MD5

    d9946898c97c0f4b1da29ddbfa3c5440

  • SHA1

    c6060ab2a90b5298cca6e32ab0f59107aaef5987

  • SHA256

    91f1e1015985fd5acec97d68f9abb65910228b4301174baff2787dfaf3584323

  • SHA512

    3ae2f3e28ddfd53db967f16ca5a44243526080947ff5501fd6da6ab365dd385d59a3b14bd1537a3ef1be67f8164b9a4413ef8b615cf4883cee6da69a0597eece

  • SSDEEP

    1536:eGJAb+038FC/35Mj9Zwle1SERuQQQmbz2LK/7RZObZUUWaegPYA:egAy03l/3aOoJabQEClUUWae

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2