Extracted

• • Target

    4352219936b43a2c383083251ea463690e31a20c72da5eed941d5eb1852c17e6N

  • Size

    59KB

  • MD5

    5b896d7265db523330afb7d4a8ab4250

  • SHA1

    e13c7c1ce34a77a3b7f437cf7f67f9bf63bdaeb3

  • SHA256

    4352219936b43a2c383083251ea463690e31a20c72da5eed941d5eb1852c17e6

  • SHA512

    03a19037726f39d21594acdddf637fc954c22f888b7155d4ffc28c5931b8bedcbf30e30ce726cd7afdca69f1ff41a32f14b6b1c0aabbaf15b156c2b4ab60110f

  • SSDEEP

    768:cYRgpYw3nWrH4NszC5WMsUGLuc7s5rbPPGL5b8IHP/n2Z/1H5Axl5nf1fZMEBFEI:vRIRXiGs+5W9UWp9b8IH8YNCyVso

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2