Extracted

• • Target

    14e700903fe4f714febecbd969b40d8bd5e293322098cbf8b7eb4e3b16246e8bN

  • Size

    565KB

  • MD5

    ba34fe29f6c5e6ef121e0c3799023a60

  • SHA1

    7d751ac024269af773c72b6dfaba03f61818e9e4

  • SHA256

    14e700903fe4f714febecbd969b40d8bd5e293322098cbf8b7eb4e3b16246e8b

  • SHA512

    673780989712739a8896b8ce9b0b7d87c269e032f4d271c2b4131c4cd690da372c70082218b8e8a45abb37df513c863ff1261042541993cec75e31b145d1463a

  • SSDEEP

    12288:+BiFtuFjAh//+zrWAIAqWim/+zrWAI5KF8OX:0QtuFjAh/mvFimm09OX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2