Extracted

• • Target

    5be5cb6602050e5cfdbdb4b005006806fccdd33a0c3f22f670f927f85ce4c438N.exe

  • Size

    288KB

  • MD5

    e21a7a6359b4e9d8eda8680343a1f2e0

  • SHA1

    2580912845dcb8635b9a33914554625ee04f5be0

  • SHA256

    5be5cb6602050e5cfdbdb4b005006806fccdd33a0c3f22f670f927f85ce4c438

  • SHA512

    c28458dafd1471d6d1bebf51fdb75ad2f9d186face5239ee327ab2f38867c5ac3d62878161061ebdaed9d9208ec1ae7d98983859d5fc5e37d1a853281316503e

  • SSDEEP

    3072:wVIGu13ISawxiQA5G3F/Eeq7LDT1Yx07KlFYzqpCZSLMi5lQvuIbuzj1DukJFv7/:wVIn15xir5GBf6Ll+wGXAF2PbgKLV9

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2