Extracted

• • Target

    698dc569edf5a79919ba4eb232f6d73022582ca7cbb4df42fcabbc39510bbedfN

  • Size

    52KB

  • MD5

    4322fc8e2f3dc9608818ab906e65bfb0

  • SHA1

    909308d0b126444775aac9ec8d0aada76ec234ac

  • SHA256

    698dc569edf5a79919ba4eb232f6d73022582ca7cbb4df42fcabbc39510bbedf

  • SHA512

    b678b730d2ec88d6b62d0336d088760be918de4a2d0cc07451ee007a3c69790aa365be195b31d161755da433af1b38f7afcfbfbd59529fdb69eb4155a881fe51

  • SSDEEP

    768:h78z4hpp4GysRO7hE5DTWYsGM4qo8SEvdQfuVhLf/1H5F/sPqMABvKWe:1K4hpY3D9QfuVhdAqMAdKZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2