Extracted

• • Target

    de94c9f43634e537490fc8541e2c13b78083b88b12bcc585c38796f67eb5702fN

  • Size

    182KB

  • MD5

    7c396225fe478238be5501649357bb90

  • SHA1

    f2b44cfaf676e78bdd53ecea87ad751c2e4b0887

  • SHA256

    de94c9f43634e537490fc8541e2c13b78083b88b12bcc585c38796f67eb5702f

  • SHA512

    d18dfa6f40bf210aba426d7fa1c0a5a33961136f6d5d87b9a5352b61630bd7ab6475cd5f96a72aca26bd7bbb3b85bbafc39dba10ebd0825b226a1fd39e1f27c9

  • SSDEEP

    3072:YXrU1IKRD51uT24ho1mtye3lFDrFDHZtOga24ho1mtye3l:N1DdEYsFj5tT3sF

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2