Extracted

• • Target

    a18b12d2a28b9af020f8729f5f7646207ca6d2b1f2d49e39e754c8000bf0b57aN.exe

  • Size

    96KB

  • MD5

    4a673beec440315a22b4dd65d5484f40

  • SHA1

    82e927c2bd26fb911c6c1c61aa046e3ff295502a

  • SHA256

    a18b12d2a28b9af020f8729f5f7646207ca6d2b1f2d49e39e754c8000bf0b57a

  • SHA512

    2386644da15248ab14aa81d917946aeca0b07d1e825e2e8bc80e0e17356ecd5f4ce93209125f135056870837e8935435f1edbf6bb73b16748198a5d61b0421fa

  • SSDEEP

    3072:8IInJFPYrI/tz888sxtzEp9ZApClUUWaef:80EoZICWUM

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2