Extracted

• • Target

    2025-03-29_b669c5fc42e0fc071f7873fe34c0fc8b_amadey_rhadamanthys_smoke-loader

  • Size

    400KB

  • MD5

    b669c5fc42e0fc071f7873fe34c0fc8b

  • SHA1

    ed408c518e20c4dca461fb6628bacfc92c8a861b

  • SHA256

    977149c71ee0451de4e7358a5074510d1113262ec85b3bcaa727a5005c39d3fc

  • SHA512

    6eba48feb4c8330e6873417c929f780d47cb2186e7e2cb97f779506f2407729829d3ad5fc37c06342c938edc37f92133ccf0e1be5d7faafde5e33f35d2e1d044

  • SSDEEP

    6144:vuqsLtf5d6/CSQYJ8wEbbL5lULW8wEbq9ByvZ6Mxv5Rar3O6B9fZSLhZmz:vyp82o8wE39uW8wESByvNv54B9f01Zm

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2