Extracted

• • Target

    60237e9c4e8f1d979831a2ed4e192a05c2a1a31619820229a21ed8e71e44756fN.exe

  • Size

    288KB

  • MD5

    de015e64df7ff0c3ae661baaad10d450

  • SHA1

    dcd244e98a3703e69d67294ae198e487cd39b8c9

  • SHA256

    60237e9c4e8f1d979831a2ed4e192a05c2a1a31619820229a21ed8e71e44756f

  • SHA512

    f74cee29da816dfe5493dc29b350e398ed0c825ca4e60e6b0a25a9f22fdce72179201efc9419bcac329fe72a95a9b4c70f5855ad97bfbe12d667129aac879692

  • SSDEEP

    6144:RlYwmWhm8EEngNGZcLl+wGXAF2PbgKLV9:nmWI8RngNNLMwGXAF5KLV9

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2