Extracted

• • Target

    13789e60d4c012b78d4f1adae6e3a6c4c5e4f2ea32be7c010916ccb62635e9b2N.exe

  • Size

    108KB

  • MD5

    c645a67d9aa39af331acc828033f8630

  • SHA1

    d1812e784d7a342b88fc42db80d7cb9675b32bcb

  • SHA256

    13789e60d4c012b78d4f1adae6e3a6c4c5e4f2ea32be7c010916ccb62635e9b2

  • SHA512

    6dd5f4f39e3b258fe5aab373391f3f2c2b82e318748fb049597f13b109490281a14190a23c5c1221618a859068b047d10e24021a211472814bb97c22a5ba3195

  • SSDEEP

    1536:dK6+69QiBZOaQ/aRPfMcp+nXe4DpPI5rGzrfAnNtJFcFmKcUsvKwF:dKR69Eel415kYENnFcFmKcUsvKwF

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2