Extracted

• • Target

    9b074a73e89f6df255ac670dd0000ce1add043b368de0fc989bf761282b43aedN

  • Size

    232KB

  • MD5

    08207c68228d37dbd9e166b75c8db910

  • SHA1

    cba1836603a43d9eca252577eea3e771310cd3b0

  • SHA256

    9b074a73e89f6df255ac670dd0000ce1add043b368de0fc989bf761282b43aed

  • SHA512

    45682d05f9af549a902ea43ff69295071b9c012dbeb6a3d61d962c097a4da25b987a6a0dc310c9f6ac2bce9272de4835ca91e864b10eb2d49356439f5e803c5f

  • SSDEEP

    3072:/GLknheAR5Y7usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121TzlbNRfzPad8:n35Y6s21L7/s50z/Wa3/PNlPX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2