Extracted

• • Target

    029244796b88b85f109077011d366a0d39a18573738c4fc659d2fe7e459980acN.exe

  • Size

    265KB

  • MD5

    7e741159ab3ece48f9585abb8f141cd0

  • SHA1

    6781618cb67c7804982c9144b9bc5c52d1548098

  • SHA256

    029244796b88b85f109077011d366a0d39a18573738c4fc659d2fe7e459980ac

  • SHA512

    f0f0df8e5cfc2dab20d41bdb0c32e6ec957e2245c92fd2b2e09734d05e98f04ae3ed454f872d2cd29faa33fd96431cdf7bf44ab85a86b34ae8220a5eaf934e37

  • SSDEEP

    6144:2av6NLF8lcmTaFM6234lKm3pT11Tgkz1581hWr:29lFHFB24lzx1skz15Lr

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2