Extracted

• • Target

    821aa35be86106ee24d8a19ad9d1d5cbe1dc78ee9d01d0ec443bfac7f3a53f57N.exe

  • Size

    72KB

  • MD5

    e271137b1249515f3ca2beba62cd1550

  • SHA1

    f7f850e6b2134ed8f829785a67e0205f55e2cbb5

  • SHA256

    821aa35be86106ee24d8a19ad9d1d5cbe1dc78ee9d01d0ec443bfac7f3a53f57

  • SHA512

    d998164831cf891341192e60fbcf90ef62bd5885347b8cc36add9b66d4be943a7ec0c97de62e3464ce60f99adc9d4254522fb762927669216fbb384739ccb8a9

  • SSDEEP

    1536:bHlJK1XgOBHhHa8+ivpP4Kd7RvCvZNl3h/1d4pBr:bW1XjHh/vieCvZTR/opB

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2