Extracted

• • Target

    47524bf469b0c1e37cee31ef52194cbf9a361750ba2cb9a7bf8ade28fe960cad.exe

  • Size

    288KB

  • MD5

    92cace91195fabb90e96edc5dd293e74

  • SHA1

    6810cd83e63bc681ff3e31c7bd28d08d0a3071b0

  • SHA256

    47524bf469b0c1e37cee31ef52194cbf9a361750ba2cb9a7bf8ade28fe960cad

  • SHA512

    1ff9cc2588fd2be7ab7f9e477ba29d092bcde4f5b0b785f5388c585da573968381e1872d5ff5cd8d532b957f878dbfb7fc680d826b56088a2f89cc6f1d9b061f

  • SSDEEP

    3072:KIlE+0A42dMislleA7LDT1Yx07KlFYzqpCZSLMi5lQvuIbuzj1DukJFv7I7JxxIn:8+Z3dRslIYLl+wGXAF2PbgKLV/

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2