Extracted

• • Target

    1a40e5665e048e810a8450808e07196a203dd2696cd278c11df7a0562ca724e7N.exe

  • Size

    108KB

  • MD5

    1e8df179ed223d8355718fbf94e71f30

  • SHA1

    4b91a04fc54e7faf58e9a90880b41ede0727f053

  • SHA256

    1a40e5665e048e810a8450808e07196a203dd2696cd278c11df7a0562ca724e7

  • SHA512

    1b35a2ff3ea38d8493850bf8f2669f926025a0c639e216b6101f6da038f8cba25f3f91581a67d3719479c97490901d3a5326510f92b96fd7d5ed5573d3ba173b

  • SSDEEP

    1536:zjGdl7imn5hFth+Opr6EW4kCciU21DFMFnLFcFmKcUsvKwF:zjUld5C2xW4kb21DmpLFcFmKcUsvKwF

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2