Extracted

• • Target

    b8b34663925961ab695223bec631b22499b214b05dfd661658ebb3046b022a4eN.exe

  • Size

    288KB

  • MD5

    e21aad1a947ad207ed3045011d35f5d0

  • SHA1

    0c028acc9d9bcd04a63a6c5bdcb34414e060fb40

  • SHA256

    b8b34663925961ab695223bec631b22499b214b05dfd661658ebb3046b022a4e

  • SHA512

    50d7edd67b6735c2257d105e12d9b07760d52d12fd552def18a8512360d4c9b17f2bf04b953a97b1149c80ac14e53b7db6e80914da1956194085774fbebdfed2

  • SSDEEP

    3072:udm6UwFEMOdWrnKh34QeI7LDT1Yx07KlFYzqpCZSLMi5lQvuIbuzj1DukJFv7I70:ud8gMdgKh34rQLl+wGXAF2PbgKLV9

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2