Extracted

• • Target

    83eba695abb2cfd608feef80ca1cb3363276173140a4407cbfb4f349c8582231N.exe

  • Size

    265KB

  • MD5

    e55352944152dac8364cce229e411200

  • SHA1

    8e11350bd1d62d49eb4ddc31b9a3d891f49a03ca

  • SHA256

    83eba695abb2cfd608feef80ca1cb3363276173140a4407cbfb4f349c8582231

  • SHA512

    688ef175fe8aec0ea7c5eeee182b64d263091a76e48d632a44abcaa3b25a7fefd5f034500e54f78de738a8b1c4d3e52e4e6578aac8c3b3a9fd6239917cd138ee

  • SSDEEP

    6144:9RI/M4HCnIJI0IGFM6234lKm3pT11Tgkz1581hWr:9KEU5PFB24lzx1skz15Lr

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2