Extracted

• • Target

    90d137959258afbf341f5b84b966fb1a465e3d3cd84c760809bdcd40e8c3b215N

  • Size

    55KB

  • MD5

    9be482214045a42f87ed3df687c1ddb0

  • SHA1

    44afab3b9cddfea18346218aa65019753835d0b6

  • SHA256

    90d137959258afbf341f5b84b966fb1a465e3d3cd84c760809bdcd40e8c3b215

  • SHA512

    e439e7f1cd8d10ad662edb9ce46634ee660916646f53c44a5a4fe378e666cb7b634a87eac159f50f052408d2a85c5bdf0a0871abda9cb1d9de70df1983cf5570

  • SSDEEP

    1536:QULX6w19V2WZ9FVnOdeseONSoNSd0A3shxD6:36wJtVn9vONXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2