Extracted

• • Target

    2025-04-02_3186ca0f702c14e896be4706d0b7bbcf_amadey_rhadamanthys_smoke-loader

  • Size

    406KB

  • MD5

    3186ca0f702c14e896be4706d0b7bbcf

  • SHA1

    ef81a27b4b2e46292c4be8c7ed6507436f1953b2

  • SHA256

    d780e60f01ed0cb77b148451b9d3f895715a1a10f860fc4a4eac9f6b140ae8de

  • SHA512

    cccec15778526f4078646fbbca82683dd1366a6cdf2c197bc58537215963524d8dbd59bb94eb6b3137deba8ca966593b50b629c081341cb6f7870bfd819ed5c9

  • SSDEEP

    12288:0Z7Q2o8wE39uW8wESByvNv54B9f01ZmHB9:mQ2o8wDW8wQvr4B9f01Zmv

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1