Extracted

• • Target

    fd5bbfd9711c4caf90a83eca12e1ba01a2808c014aa70073aa2aa84fa8670d8c

  • Size

    79KB

  • MD5

    bd5e57d9a28876e6c5eeb3de0f450d17

  • SHA1

    fc0e31889f620eb8ee4aa7242a8929690b858996

  • SHA256

    fd5bbfd9711c4caf90a83eca12e1ba01a2808c014aa70073aa2aa84fa8670d8c

  • SHA512

    9897c378a73c3506faf53744793652b0f314b48c8f3bda15d4b2602f2b3aab07dd7c187e886ad4f32841b91123b6bcac990cb82857f33a0c0d878ca83ff5d42e

  • SSDEEP

    1536:rPsgn8g9XIe/mgm5vItwUeYSLLowS+3kd5OYCOFvRQPRbRUs3cO57OWxXPu4T:wg8g9Yeegm5wbeYSLcwS+Ud57FvePljt

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2