Extracted

• • Target

    920180660f15d18fc5b9b4b3f86e70d4d606c30ee37b99de2c1acefbbfcca2a5N

  • Size

    219KB

  • MD5

    084c8d8e1bfaa4957df9375ded982500

  • SHA1

    1040a46b74f18f3a915b426dcd46e9a22a97c391

  • SHA256

    920180660f15d18fc5b9b4b3f86e70d4d606c30ee37b99de2c1acefbbfcca2a5

  • SHA512

    754a896a69c0fc16115f2d44f693752423fae304710a0e939d382a226583b12b9712e4b6d548b8ab9bcd15cc3d2429b915c7ca656a9ac3600c9f890098961196

  • SSDEEP

    3072:Ypizo0trcPryPzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:+icgYrozDOO0aDD4PCxdXXwSfYrwB

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2