Extracted

• • Target

    73bb87ef018b22cfec233835512e3cd7835663f6b73df652fdcee38fc7e238f8N.exe

  • Size

    199KB

  • MD5

    ff81c0bdd434fbc864693dbded85b580

  • SHA1

    12b8cc72ffa3df162d86720f4ce5a6357b02c336

  • SHA256

    73bb87ef018b22cfec233835512e3cd7835663f6b73df652fdcee38fc7e238f8

  • SHA512

    d83f2b0cd5e933f458d14a0eb8a81ce608221eb9420f931842fae6042214c42d7d97bc94583d77197836fd9a6e723362a8d195065482a21c6a3e016c699f3182

  • SSDEEP

    3072:7++TJaUFYBHePigOqCWTvrQnU1TO7Ihm+1581hWht:7++TwUF2+lT11Tgkz1581hWr

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2