Extracted

• • Target

    5a13fef91d1090bb5104a6310c0b82486e0c81511a09231d234591167bc75990.exe

  • Size

    108KB

  • MD5

    6687525914810411309445d8df0ec196

  • SHA1

    ae1a7a99d4927178b3b12bcbf5bd59c9cf44144c

  • SHA256

    5a13fef91d1090bb5104a6310c0b82486e0c81511a09231d234591167bc75990

  • SHA512

    08c5d62c8ddf6a6f73957486987291b32ed4886e52fe92b536c12bbc1ba7309b07910da7eedc8fc999cb6e216308ae1261be5357c48d2ce6ebb4221c382da46c

  • SSDEEP

    1536:d2cgdJOV9ASwgUP4PgUfRNohNyCEwFcFmKcUsvKwFo:d9QUcSwgL/ohNytwFcFmKcUsvKwFo

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2