Extracted

• • Target

    f92eb4e301d18e9149469f6ab8b53a352eba4c815c167268fd5620c6e353408cN

  • Size

    55KB

  • MD5

    7f3b5698d0ab25735093b2a6634d8c60

  • SHA1

    04b3dfcfd5d13f251f1923840badd4f4f2b1954d

  • SHA256

    f92eb4e301d18e9149469f6ab8b53a352eba4c815c167268fd5620c6e353408c

  • SHA512

    eb702cb0c7e75c60023797fb63d7438ae457e00ede2df8ce0632abb56fe74648f73d0a7251ee22db8ee873d7fd0733a41a29ef2292a469b78e84d36d1fe66c4f

  • SSDEEP

    1536:6kLGST/aUpru6vKsNfvNSoNSd0A3shxD6:6kLGaNz1vNXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2