Extracted

• • Target

    04bf0cb356138e2897a036082cd9ceffe3790a7c224b38345f6448f1252fce4bN.exe

  • Size

    288KB

  • MD5

    dba366508b8b4c9cd8646f2c99c13f40

  • SHA1

    f37bc00c8a0485be1d72425f5f2f63ee661b11a4

  • SHA256

    04bf0cb356138e2897a036082cd9ceffe3790a7c224b38345f6448f1252fce4b

  • SHA512

    01b25d829d96854f57ea061c54b32b8b5051bbe43b486976dd3a9ff9076af07578ceced807943ecf6ce5a2734bd1e85d632caa26190f7bf0eebb74d31b977e07

  • SSDEEP

    3072:GbdDRQz6RP2RJeRpe7sL/LAjDAOeN7LDT1Yx07KlFYzqpCZSLMi5lQvuIbuzj1Dx:eVq6geRpeUDAjDoRLl+wGXAF2PbgKLV9

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2