Extracted

• • Target

    603871bf00540e8668dbbc0cd19bf7ae5261a73e3d211c032558b71faa2cd25fN.exe

  • Size

    96KB

  • MD5

    a4c6cff27637d2827dc15fef84ef7130

  • SHA1

    352edf55a4591a4862f6f9214e0bc7ddf26882bd

  • SHA256

    603871bf00540e8668dbbc0cd19bf7ae5261a73e3d211c032558b71faa2cd25f

  • SHA512

    e95592d7fb8d2b973d2b4d70e95dc2fcd26254a4bf2b7b245c7da2f5f92c8558fc04efeb8143471d2d54c1b82aad185ad569c9188bcaed01039623639de7ec69

  • SSDEEP

    1536:RYmuKucJHCzWz/rIkpf42L/7RZObZUUWaegPYAG:qhkHd/rIkr/ClUUWaed

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2