Extracted

• • Target

    0a4468baacb1cf05d6ab02065f2db9e8e4b3cdf5ef02cc177d0cd3c966071be0.exe

  • Size

    96KB

  • MD5

    d7b0935f109d534fe587d32a16d00956

  • SHA1

    fb7268f80705bd94507692dcabeca76a8973f0d9

  • SHA256

    0a4468baacb1cf05d6ab02065f2db9e8e4b3cdf5ef02cc177d0cd3c966071be0

  • SHA512

    0ddf2d8be0a8152551e5b3732c786e8e33ac0474657f9dde23a1465e1440ae25f8e47c89077ac4df7957310b30ef4589b5cfef6dbacff6989fe470caa58cbdaf

  • SSDEEP

    1536:VvU/SdI3hCFtgLGfp2X2L97RZObZUUWaegPYAS:VvU/8wAgLwd9ClUUWae/

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2