Extracted

• • Target

    b7416130c85223ec6c39c8df8e8ed3f46c73c3b9fb18d02457087ae847cbb8d7N

  • Size

    67KB

  • MD5

    cef18d5dc17fd6d43913a8beba555950

  • SHA1

    eece6538fae76c0265e4980b09d87a047bb04961

  • SHA256

    b7416130c85223ec6c39c8df8e8ed3f46c73c3b9fb18d02457087ae847cbb8d7

  • SHA512

    b87168b4ef36c079258f4b4ada15bc1362fd404f3d56e81ba1a53ac7ee8e89e1f6da00c75a47c19998d5c11597e0ee0175579921040bfacc23b2142f6cd3f968

  • SSDEEP

    1536:KR7MAnsP/CuO01zuMxP5BGrah01hKPysZsJifTduD4oTxw:CA93CuO01zuMxP5BGrp1oPysZsJibdMe

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2