Extracted

• • Target

    5cb6732b9884e006f3128b5f5c50c073d408368ed21c3ecc5e9e339aab56dd91N.exe

  • Size

    108KB

  • MD5

    a9dee01044e84558ed3c37b8abf876a0

  • SHA1

    4f77d313ae49fd54b5aeb503ba9d2ac040df5cda

  • SHA256

    5cb6732b9884e006f3128b5f5c50c073d408368ed21c3ecc5e9e339aab56dd91

  • SHA512

    5a5a12b0c8f5c77c5e66fae033dd85cce655bffe071d0b60bdf8507c97540ac1d481b83713ef98606871340513b70064a89e70e7628426905011dbc0e704b4fe

  • SSDEEP

    3072:zLcbsrnugfO/8fL/nuEdf6PlimFcFmKcUsvKwF:zLcmnugfO/4Zdf69hUs

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2