Extracted

• • Target

    190453f7107560ff2761fb8a84f190fd7ca9af34ab20f7418dd9eb2ae56a2eb9N.exe

  • Size

    422KB

  • MD5

    cd0ecfb96350b9491bc55f063d756a20

  • SHA1

    d993ca998ebeba21d9e30ef2949e97b1a2811916

  • SHA256

    190453f7107560ff2761fb8a84f190fd7ca9af34ab20f7418dd9eb2ae56a2eb9

  • SHA512

    8d1a3719b214b8eb9d0f806e271dadd4f37780445e8e200e3aba5917ce397ac1dd0d4e277299ea71451f0466d4f51867efefd1f290cf349001aa7b9c4ffee971

  • SSDEEP

    6144:WYDnbpbabO6FSPnvZU1AF+6FSPnvZhDYsKKo6FSPnvZU1AF+6FSPnvZq:WQVGaXgA4XfczXgA4XA

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2