Extracted

• • Target

    123ac71e74179225eef3eb68eff34d3220d20d166ae4b84a0b4f37fc86432d55N

  • Size

    379KB

  • MD5

    df5f76f717c76451c7c5f1f93ee76ae0

  • SHA1

    7fb0696a44c9da474f8e8ed83f088f951e357d5f

  • SHA256

    123ac71e74179225eef3eb68eff34d3220d20d166ae4b84a0b4f37fc86432d55

  • SHA512

    396c0fbfdf7ee408051b1fdabbd0ca94c9dafad56db45bcfcc62e1236ffcdc789466a0a9271b9521123f65e546699966689ccb5db97e2231207e535b7b7423dc

  • SSDEEP

    6144:4eOXjTli7O/0xLxli7O//yb1c3ccU0S6GyTgfiEkrE:4eKF6vxr6lGHaXyTg6EkrE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2