Extracted

• • Target

    2fdb9a691d3b5a05f4fffe5e937796fa06c8a8c7793267ecd1353e083866c56fN

  • Size

    84KB

  • MD5

    098704bd0a2705346835c8f7a60c7f00

  • SHA1

    d9c5c7721982317e1a4fcd9ccb5843e3e1f68eab

  • SHA256

    2fdb9a691d3b5a05f4fffe5e937796fa06c8a8c7793267ecd1353e083866c56f

  • SHA512

    9b8f99ef144cfa522701bf196befff04f5cf887e22cc1e72126bdde352121cefd39dac2fcf7c7b6f663a68e8cbd7bdd888db3b2af89f2bf680705f0c5d2164a7

  • SSDEEP

    1536:a27F5xc+F+0LppU+At4jqDu0mm8ANZLvfPDyH6n8dEelLYR7xeGSmUmmmmmmmmm1:hF5xnFG+LqS0m23PDyH6n8djlLYR7xr3

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2