Extracted

• • Target

    583edebae7e150b3b2d1fde8e067a163c2e3496edd9407ceb5b3f8dd1f352b82

  • Size

    91KB

  • MD5

    a6ade69e9a9676823e33edc9184ee113

  • SHA1

    6cc6889a45579e1d08b26e802b3c65dbc9d7743c

  • SHA256

    583edebae7e150b3b2d1fde8e067a163c2e3496edd9407ceb5b3f8dd1f352b82

  • SHA512

    57393756e28f17dc1693e585460ae4c415038114ade947ede49c86cde9dcda3353c9a45d8e4ff533a8206a71c082cd439824552d0f1a5b3089ea9b4af02f2f25

  • SSDEEP

    1536:jmLcyWio3Gzxf5q55v525A5aH5nLq+2SOp12HJunLyDXdi8pE4g5a3iZ8saqYko:jmLcvGzxf5q55v525A5aH5nLL2F12HJp

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2