Extracted

• • Target

    b0fb49037cfa76c6029727e3115b3c5a60376c907a02c1d3b8d235d4679f989d

  • Size

    69KB

  • MD5

    b4e11789cf179bf682bafedf661252db

  • SHA1

    02870f1d8e2ecf6b035a9072f57289a2d92f0cfc

  • SHA256

    b0fb49037cfa76c6029727e3115b3c5a60376c907a02c1d3b8d235d4679f989d

  • SHA512

    5d0d7b436f306a0e99f4e8ed0ea20c3a982243429b06eda6b51374a717860b69dc618e083ff6401c36639e9abc4ddfef6f286785543d0b575e4d614c81b860af

  • SSDEEP

    1536:QMgjxQHwGqllX2gf6BqB48qPLoNein/GFZCeDAyY:QXCH1I6BqODoNFn/GFZC1yY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2