Extracted

• • Target

    e35beaa227f6b563fc7a51f1104fe4ee8dc2b58d8a9fc822dbd0a6b23d42e7faN

  • Size

    64KB

  • MD5

    f31462fdbe4edc2f8ce6902ff4ecd640

  • SHA1

    c9c163abc8b072210a21be2b390c3ccd7486bca9

  • SHA256

    e35beaa227f6b563fc7a51f1104fe4ee8dc2b58d8a9fc822dbd0a6b23d42e7fa

  • SHA512

    3b6303404b8e67666bd0988a19be285a995381437af4571fde0053f3f1bee9e4cfac5c3dddb09f7fe561db3a805fa0965c7eb66d38f303488c02e420753d707b

  • SSDEEP

    768:1Tr4UgWGOBKWuA7z0U93Vhkc+A72Zn8vCjR/1H5C6XJ1IwEGp9ThfzyYsHv:/jVBawz0K3VGcV2h8yLNXUwXfzwv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2