Extracted

• • Target

    2025-03-30_3786cb02a69c5a38f77a819ef4b48855_amadey_rhadamanthys_smoke-loader

  • Size

    400KB

  • MD5

    3786cb02a69c5a38f77a819ef4b48855

  • SHA1

    649b8c822669fcdf9c1d40b123bf5fb39c0064aa

  • SHA256

    9bd48236bb01e328fb9bbe3dd3a0d13ea7daa5347fb2141284ab8d514fd896a8

  • SHA512

    a79cb1e258709e7f6929b82836dd5dc05783681e0457b0fe6d4caae9463e57116473c6af30773f7f309475766614d2b69ebe7241ed1862d0f054377f35142645

  • SSDEEP

    12288:rVYovx2o8wE39uW8wESByvNv54B9f01Zm:pFvx2o8wDW8wQvr4B9f01Zm

  Score

  10^/10

  berbewbackdoordiscoverypersistencebruteratel

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2