Extracted

• • Target

    ef77a92c6b9c2b32b8c4375ac8553792a8397ae0d7c54c015241ec3ef278c0d9N.exe

  • Size

    96KB

  • MD5

    a2ff42fb2318b34e6b5834a17c80d490

  • SHA1

    c83b137f00a257a9c4e9f8340f389a6abdc3bb6f

  • SHA256

    ef77a92c6b9c2b32b8c4375ac8553792a8397ae0d7c54c015241ec3ef278c0d9

  • SHA512

    9dc63b797fbcece1b435ca5e10f5ad8ff1dc69906ba3f82332c6f247df22e2557f297ac0aa4d69d74d167076c56745295011dd35356a982b30d98a3c76351e29

  • SSDEEP

    1536:Vo7budLD+ALhlrkvLAeFDC0U2L17RZObZUUWaegPYAG:e7yd+A0xJt1ClUUWaed

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2