Extracted

• • Target

    bce3e00e8def2bb604bfaace98f835dc96a963681c8726637f279bb53707ad92N.exe

  • Size

    288KB

  • MD5

    bbb19b3869d875b73e493c22b76deac0

  • SHA1

    863a49fbd4be3f2a7790c1e5c7b9cb7bb09e155a

  • SHA256

    bce3e00e8def2bb604bfaace98f835dc96a963681c8726637f279bb53707ad92

  • SHA512

    0ec9e60011abc00a547ced4ab540ed63cf190dd6c80f64fa2f319d1c70c08d61a563a17a666c36146533048eb47c8d30b545c822a0ad77bd9d4adf297ff8c8a5

  • SSDEEP

    3072:1tW+QSq3BRj4t9fDQadGTmnje87LDT1Yx07KlFYzqpCZSLMi5lQvuIbuzj1DukJZ:14+Q7BZChDQ1mKMLl+wGXAF2PbgKLV9

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2