Extracted

• • Target

    e72943f5318f9087f9d16a09ee7237035645a1935dca24bcae401ad99053b1b6N.exe

  • Size

    288KB

  • MD5

    ba023b1a8dff75d71254d730217ffae0

  • SHA1

    4e29a08a54c6cf30926e06d977e5f1b15f51dc5b

  • SHA256

    e72943f5318f9087f9d16a09ee7237035645a1935dca24bcae401ad99053b1b6

  • SHA512

    4f9776e749e57e4d72cffe4c9209b73d837b906a85e57fb7f41504e527d7ac9f2a65e2496975c729a8d64431f653c970537ef6653bc751c9b90f6c65f4875b67

  • SSDEEP

    3072:KIlE+0A42dMislleA7LDT1Yx07KlFYzqpCZSLMi5lQvuIbuzj1DukJFv7I7JxxI1:8+Z3dRslIYLl+wGXAF2PbgKLV9

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2