Extracted

• • Target

    2b08242364ae5826d4c35a1c1a269571c6ef2cab0b242fb9bb3b3ba1ba1ef6b6

  • Size

    69KB

  • MD5

    e3bd1762c768c170baac80ef89aecf1d

  • SHA1

    a8ee7a86acfdd1fd6d989b15f093cf62572de359

  • SHA256

    2b08242364ae5826d4c35a1c1a269571c6ef2cab0b242fb9bb3b3ba1ba1ef6b6

  • SHA512

    3803ff299a5efddc60e89087b2d2d7c5d4ec7140602016f21dba9ad048d1f611beb137d1e378c331831e310da4d8e8c0e943bdeabe054451defe5e1806ac420b

  • SSDEEP

    768:nxhkWJXzeuVdlHsdAmsezWij609U06JMpOgov01g/1H58hU9UiEb/KEiEixV38HM:n8+quVLHs9jeJMYgYjPgUN3QivEg

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2