Extracted

• • Target

    51e5bf355cc3747dd9b00c20be975298d6acc8354a7f11a4676d44b2c9850e0e.exe

  • Size

    265KB

  • MD5

    204fba344b628199594fa0224838cd7f

  • SHA1

    33549db449f828a8fb2a8c7e0c804dd816f4d957

  • SHA256

    51e5bf355cc3747dd9b00c20be975298d6acc8354a7f11a4676d44b2c9850e0e

  • SHA512

    e157d9f0282e7199bf06fe2f5bf25cee6e634d82d48a8cbece84ffae96a84217dee84e059670c507b766678c6d393322acb33b7d82de04edf6f9cb15cd416c89

  • SSDEEP

    6144:9RI/M4HCnIJI0IGFM6234lKm3pT11Tgkz1581hWh:9KEU5PFB24lzx1skz15Lh

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2