Extracted

• • Target

    db5a485faded867326bf03de9d009bf3b5238a2a4df005ff949f29df496e7488.exe

  • Size

    96KB

  • MD5

    d0757323c7c8f1027f9dad63b9039077

  • SHA1

    8b6d637b10038776461a75bbb1bea51e80bbe5ab

  • SHA256

    db5a485faded867326bf03de9d009bf3b5238a2a4df005ff949f29df496e7488

  • SHA512

    c9f14b086ce00001080a52fad39bcdddab6b160a5e23359908de297bc76237dd2cbbfde61a7ec6b11291a8ee06539d13114c19da9d9bae87fd0ff91f1daf3077

  • SSDEEP

    1536:h0PwszFccjGqcs4GFXoy6MDsPqEVUNu2LR7RZObZUUWaegPYAm:aPwsacjGqcySy1YV4RClUUWaeN

  Score

  10^/10

  berbewbackdoorbruterateldiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2