Extracted

• • Target

    f756e474b1a3efb84315f220264ee97412e97df213ec3e6404fc6b70eb258034

  • Size

    265KB

  • MD5

    ea85dab2a84d5982371e08fa6eba9023

  • SHA1

    c9fc998fc4ab1932c78d8b45d8099b59844d274a

  • SHA256

    f756e474b1a3efb84315f220264ee97412e97df213ec3e6404fc6b70eb258034

  • SHA512

    1f931f07d3d0f14aa39d789e1ea1d77f5085b0cd1bee0e8642aea3fe589e8e941ea955845d9edf0eb6041b25a10185abf98c735869f4fcf915857897299e2118

  • SSDEEP

    6144:cRn/was02FM6234lKm3pT11Tgkz1581hWF:Gn/dsrFB24lzx1skz15LF

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2