Extracted

• • Target

    ee5a6604ba4c1854b04bc2a9b1544729e5a4d76827b3f0f134307578daa608e5

  • Size

    344KB

  • MD5

    0ca754a599c667a3d25d1a47c0c9b87e

  • SHA1

    d671ce37fdc9b70dc645cb6e55256c269c9394a4

  • SHA256

    ee5a6604ba4c1854b04bc2a9b1544729e5a4d76827b3f0f134307578daa608e5

  • SHA512

    ff60ea4c53581b55c21a32631e7d6c081a093a91436b0143e4527ad333dfde12633c76abb6c656530bc1bb63a6ba31076fceb1d9ccfe9742383c91bc8a9e8a6d

  • SSDEEP

    6144:DhjMU1cCpX2/mnbzvdLaD6OkPgl6bmIjlQFn:Dh4UWCpXImbzQD6OkPgl6bmIjKn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2