Extracted

• • Target

    f2b481be158d4696829208b33c1fac896bc5fcf43f31de35e5d28ba7fe5451ddN.exe

  • Size

    108KB

  • MD5

    3a9b40146007cff596fe799678187590

  • SHA1

    f8355c5a21a53a4126c8e1b16fbc96da3a91915c

  • SHA256

    f2b481be158d4696829208b33c1fac896bc5fcf43f31de35e5d28ba7fe5451dd

  • SHA512

    048931a33b485d23cb72be355c1b0992ff32cbca2ae2bfb5cc1e9da97a624d6ab1e78b23872ac3c21cabe18e45ea016361986a2873c6809c4845b066f134511a

  • SSDEEP

    3072:dvI3D3GCfainaQwYehOvbdjKUuFcFmKcUsvKwF:dQ3jUtBYehOvbdjrOUs

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2