Extracted

• • Target

    6127b5f410fc5528af97d019a8d5b0efdb0ac90efa27685372b385da863b9c22.exe

  • Size

    288KB

  • MD5

    82b5b7905563a583f5109a8fb0abe52e

  • SHA1

    33e8fbe7102ddda9f43d5e0f1a933ae851cd67a5

  • SHA256

    6127b5f410fc5528af97d019a8d5b0efdb0ac90efa27685372b385da863b9c22

  • SHA512

    d06b8d55bee2e2c16e025487820ab5feed846b2e52766bd01d50f059cdef775f67a0ef376405656292690208bf23c80f25b5145a8edc37ce52efa4b036afe2be

  • SSDEEP

    3072:NieekoB+DIJsjxzlheH7LDT1Yx07KlFYzqpCZSLMi5lQvuIbuzj1DukJFv7I7Jxw:NFe3+DIqz0bLl+wGXAF2PbgKLVH

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2