Extracted

• • Target

    d7b249e0053fef3323ae11a1f653c5077b53ba1a9f2f31ef8f4a1aa8f28d8773N.exe

  • Size

    288KB

  • MD5

    aa41cdb17d5c4b27484265c06b570b70

  • SHA1

    678f058f8f48efa04e54ecefbbc8b626e39f19f6

  • SHA256

    d7b249e0053fef3323ae11a1f653c5077b53ba1a9f2f31ef8f4a1aa8f28d8773

  • SHA512

    da7ac79ca200cde95a0f8b8cfd4454eb0959d4d87d59b6516c1874350e49bbe7275a75369a8b305aa091b1242c9282fa058cf0af4e640bbe29fdc8b190a4af53

  • SSDEEP

    6144:Tk0cFSrMfWARKHDkRSLl+wGXAF2PbgKLV9:T2SrmWAEH4MLMwGXAF5KLV9

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2