Extracted

• • Target

    e9fd22b9079a9ea8997e17f785a982b8122ffa84f07f6cbd480d3259d35211f9.exe

  • Size

    288KB

  • MD5

    ead358cc0d1db5c61b5013c590d72c52

  • SHA1

    f05a1094ab1dca1d6c3b9d3b8e23c4137715e7c7

  • SHA256

    e9fd22b9079a9ea8997e17f785a982b8122ffa84f07f6cbd480d3259d35211f9

  • SHA512

    cb554e65b6aa5914ccb64012bebf0facd4ee65ac8cc01d3159df96db699524785a7b323139c80c7dfcd801753c1c684b15ecb31f14998dd0d74777254ff8ec30

  • SSDEEP

    3072:GbdDRQz6RP2RJeRpe7sL/LAjDAOeN7LDT1Yx07KlFYzqpCZSLMi5lQvuIbuzj1DR:eVq6geRpeUDAjDoRLl+wGXAF2PbgKLVd

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2