Extracted

• • Target

    962e2c0ddbe743b73bcc598a018fe0d7560da3f4acc0d828c6f942e45ec9843dN.exe

  • Size

    96KB

  • MD5

    be1050ab78e9b768e72c6155bc255dc0

  • SHA1

    3a382310931bd43823a07910f8cb6672a610e392

  • SHA256

    962e2c0ddbe743b73bcc598a018fe0d7560da3f4acc0d828c6f942e45ec9843d

  • SHA512

    48a28f0c86825bf05df84fefb2fb6db1e3866698a9d0ff53d00bf7028a296f6db3407f7216ec64bf1cd2adcec87fc7c46840ff0a31682332bd4ca9ce85e7499c

  • SSDEEP

    1536:KbezD47/heHI1i+m/UYV2Lo7RZObZUUWaegPYAW:Ff4wHI1wXGoClUUWaeF

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2