Extracted

• • Target

    2025-03-30_05ec689ad595a1c056858a5e4fa3dc2c_amadey_rhadamanthys_smoke-loader

  • Size

    400KB

  • MD5

    05ec689ad595a1c056858a5e4fa3dc2c

  • SHA1

    94a10ec8ca5c6520e9719d7a11886f0d2e137735

  • SHA256

    4d1a52ad93d2f16b9985438fb1d466ab398e5110ccf693456162df94029dc513

  • SHA512

    eebdc1bd7d5fc6230aff7fe330334ca6ee687171ba78171e179ca48f220737c3eec3788dbeb822d57a39293af5707c7a401da6f929d3a88668c685cc7463c2b8

  • SSDEEP

    6144:0siMvMJ6/CSQYJ8wEbbL5lULW8wEbq9ByvZ6Mxv5Rar3O6B9fZSLhZmz:X2o8wE39uW8wESByvNv54B9f01Zm

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2