Extracted

• • Target

    5a9a110c63f3c6c59598e6e26ff71067c9ab21cdb4334ad806ce9b73a1b65242N

  • Size

    256KB

  • MD5

    cdcebca46518bb280a2c2aae89bd4bb0

  • SHA1

    8dce6bb7e1ea64874dfaa6bbea0d8c67772c613e

  • SHA256

    5a9a110c63f3c6c59598e6e26ff71067c9ab21cdb4334ad806ce9b73a1b65242

  • SHA512

    79085bd156b2817dd457d9de160b6a98b37c6b63f2d66de71ef5c959d3fcd2e47314f9c88584391038414f71d8ddabe39a5f067709f8f2a7d05ae02814895d10

  • SSDEEP

    6144:CvArEj3ZHX2Ci0853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZj:uArEj3rZQBpnchWcZj

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2