Extracted

• • Target

    433d93f45cccbcd3e2da28a411199f175ad76edd11de157e3c973f11a692fb9cN

  • Size

    64KB

  • MD5

    dc94d99255eb2440402c87882535d3d0

  • SHA1

    7c7782b9b0605e274adbe52dcfcc6094e4bb227d

  • SHA256

    433d93f45cccbcd3e2da28a411199f175ad76edd11de157e3c973f11a692fb9c

  • SHA512

    e0cb9ae8d758e569a359c3c7934e34751aaa9ba7b01bac490b43d8b1cc1bd42d054566b06136b35223f1d955bb98d7fb39e8d4d3ec7bb568a1800f6e88b02c72

  • SSDEEP

    768:m4rjlQMcKemWLLmgKrEE/Cs2ArHcXQT2n9l/11CAak+fC3/1H5tx6XJ1IwEGp9TY:v5emALmgrEssH72H/11CBQ4XUwXfzwv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2