Extracted

• • Target

    dffec55f32e5f30f7994a60430b654fcd0e937d6d2883295a1c96b14776a012bN.exe

  • Size

    288KB

  • MD5

    d0731772a689d09b051397aa295e18b0

  • SHA1

    d18df4acb37460f71da111126529faa2d5141a2e

  • SHA256

    dffec55f32e5f30f7994a60430b654fcd0e937d6d2883295a1c96b14776a012b

  • SHA512

    0075291da2f8a3c06c9e5f8815807b1324c8e79fcb780611fdb7ebd0690b369525f2dfcda81e9bb21706619fcaf079e036befbfd03d17e634d61a6bf32439045

  • SSDEEP

    3072:dNH6mgAmTjMEqXh2O2QpUeG7LDT1Yx07KlFYzqpCZSLMi5lQvuIbuzj1DukJFv7/:dJHU0fXhN2YveLl+wGXAF2PbgKLV9

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2