Extracted

• • Target

    4f41afd2fd1d5ffa3b74043120e7844c2bf55b9d47289949df209625ef3ba6d0N.exe

  • Size

    288KB

  • MD5

    fe2889aa2b9b03dbdf4c8aac4a344000

  • SHA1

    9a6d136e5cdbbec77e69226f4943337c85e9b6e1

  • SHA256

    4f41afd2fd1d5ffa3b74043120e7844c2bf55b9d47289949df209625ef3ba6d0

  • SHA512

    2b06f37211506d0c7e10397552e1b0923a00a9da91e1a981e0d18fb174d3f96a43d2a7ec4a35fe8cfe660b785d02e0bb3b4fba78a5d7720a83c1e08211a83cea

  • SSDEEP

    3072:Q6MEgTxzEvY9SaeBzZei7LDT1Yx07KlFYzqpCZSLMi5lQvuIbuzj1DukJFv7I7JW:xMrTxmY9H6siLl+wGXAF2PbgKLV9

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2