Extracted

• • Target

    0e9c4c0f4ba26771496cc8c7b69d409276c3cdbd25f52818e0d4dedef3657d99N

  • Size

    91KB

  • MD5

    93f7ac0961cf93408dc44e3b674aecc0

  • SHA1

    6935e2776e7ccb59ffa7e603545a748715ae740d

  • SHA256

    0e9c4c0f4ba26771496cc8c7b69d409276c3cdbd25f52818e0d4dedef3657d99

  • SHA512

    d85f3ffda2156d5e0d90e9ba76b3fc22436fbc74344381d41c558e01abd3d050688b0e7e6f9db1fa9d7a041c64cc17bd2f423a7066d4412ece5de5b91966e795

  • SSDEEP

    1536:5zcU3HZkossherR4BwqVH9z7Ryu1jP+QsonLyDXdi8pE4g5a3iZ8saqYko:5zc+HZkgheSBwkzVyu1Vs1DN3E4xSzWP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2