Extracted

• • Target

    f230ceea3d62aef2ae07cd42d5e2e9b3d742ab878fbaaa4f30abd5b00590c7f0.exe

  • Size

    96KB

  • MD5

    9a2e7aadf0597881fc7f5e8d64d3e714

  • SHA1

    c0e41f41530d241b63fc6794d8db8bead9481444

  • SHA256

    f230ceea3d62aef2ae07cd42d5e2e9b3d742ab878fbaaa4f30abd5b00590c7f0

  • SHA512

    15028d1c523cf81da5537ab9267128cb552f9c6b75288d180734ca936f40d46e3843f3a745a6f6764756310bdb6c11f7e81fd2bd13b6464b92698a99d5148972

  • SSDEEP

    3072:wc/Ms8mR77777777777777777777777777777777X77/477a77777757R77QPSk6:z/Z8mR7777777777777777777777777j

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2