Extracted

• • Target

    434cd1e89a91bbe7ed9d09bc1930b40075d0215ecd75b9162fab9709cdfdb333N.exe

  • Size

    108KB

  • MD5

    f0a81d308e964f0be735cbbed2ece650

  • SHA1

    764426794a8505f5e51115122c5b2c73a35b43e3

  • SHA256

    434cd1e89a91bbe7ed9d09bc1930b40075d0215ecd75b9162fab9709cdfdb333

  • SHA512

    103f72804a364abafcb6a40203e04f5526932dbda5abc2b75f3f684b46bb9341331bbeb48628aff807b27ae76c1bb8a4c1f4b085ed013b7fdaf4d477c4dae54a

  • SSDEEP

    3072:zkO0HQrC8kQu5DazS9JPFcFmKcUsvKwF:zLNaOzS3zUs

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2