Extracted

• • Target

    3a072458c19c9edab835ec37839d6f669d972f4fef1d13d637c7b6335555eee8N

  • Size

    250KB

  • MD5

    a8dab983f7ce7b84c662259f74666a10

  • SHA1

    c498ef5e57a0920ced34695a6718406be4613c70

  • SHA256

    3a072458c19c9edab835ec37839d6f669d972f4fef1d13d637c7b6335555eee8

  • SHA512

    b4cb32259898424557cb43232ae213a307576d0b2ee188f5591abbf4476026b72835e3aa9a51ba2b7b904ef4766cc210e2b1611abcfdaa751f1c8166ea45d54b

  • SSDEEP

    6144:rM3HvvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:rM3K

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2