Extracted

• • Target

    51046434636ee20141e62e18698b72081872c53a39c2173df905bba4513b8f2fN

  • Size

    96KB

  • MD5

    8b7a1cc8c1ee71fe30f9bb4ebee842c0

  • SHA1

    38f2e985e361a836b5dcda18805cf156c5714660

  • SHA256

    51046434636ee20141e62e18698b72081872c53a39c2173df905bba4513b8f2f

  • SHA512

    5ac84ccebf38281d473fe84ef59e16b7f201e67dd7cda34aaabb03ec08a3c42876b208e9f068643d970b14aa4bae48cf63423a41cee3201a68042c674ee289ef

  • SSDEEP

    3072:gcx1j0QZjbO71GJOjVRmWTj3IjMNFG2W4UZd69jc0v:bx1rXO7oJ72WJZd6NV

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2