Extracted

• • Target

    2093185e7a3ce22dedf692e57d006e177c9f5c73c147f2500c24dd3f94b61183N

  • Size

    69KB

  • MD5

    fec4022b828d8ed9b6e9b5e090f5f580

  • SHA1

    acaf5464d8128e923b1e7ca03323926cb61e0972

  • SHA256

    2093185e7a3ce22dedf692e57d006e177c9f5c73c147f2500c24dd3f94b61183

  • SHA512

    fe025d3d087213636ecaea750b99fe98a533f89154d1ae870a5b7cb76d0cd0f3a906d07fd993d92404ca297a13774ca846fd8ea3810331afc41099fd3822a080

  • SSDEEP

    1536:csiHzEqhMwhk0K/kHhyNein/GFZCeDAyZ:i5hTK/gyNFn/GFZC1yZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2