Extracted

• • Target

    948c936ec068cb31bfc96159784d2799aae0a46a7a8d4f047cfffae0595f65aeN

  • Size

    232KB

  • MD5

    d410e228f5c3decc42f498db4acc60b0

  • SHA1

    1791a7ae32a3ef2cb990c96000057e008efa18f8

  • SHA256

    948c936ec068cb31bfc96159784d2799aae0a46a7a8d4f047cfffae0595f65ae

  • SHA512

    17dd5c3de073c8456f46b5ffa638c98f388c7c26177c74c31f1a185b89ce9ab7490824814609d88a5642af6e9139c608a6b12b9970ec335c6e2ab3e5a5ae12d3

  • SSDEEP

    3072:rFKcMgu5HGYZq47usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121TzlbNRfz/:rkH4YZq46s21L7/s50z/Wa3/PNlPX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2