Extracted

• • Target

    ae3bdb01ce6222a620235331075a1e1f36423fb01ad756eca3b20c0a7494dbeaN

  • Size

    422KB

  • MD5

    e864e9c1f93f3a1503a831aff0ee9060

  • SHA1

    a5c2f25433cb1059ce310569c6aa105ba8216a66

  • SHA256

    ae3bdb01ce6222a620235331075a1e1f36423fb01ad756eca3b20c0a7494dbea

  • SHA512

    3a131e8ccef8f3c1f0aba5c8d2f40bb9de8d754e1fbdbc6717aaf7683ab1bc945d659f55d6c0443ddd379fd34d5c6acc47c7181d69145a2cce4aae491d938ee1

  • SSDEEP

    6144:vjPTktbabO6FSPnvZU1AF+6FSPnvZhDYsKKo6FSPnvZU1AF+6FSPnvZq:LKGaXgA4XfczXgA4XA

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2