Extracted

• • Target

    0cb59f70aa884ea4213575cc56c943ffec61e3543e6df37a2242921ed85655cd

  • Size

    163KB

  • MD5

    cb0e30d24085fdf6f9be3a95456b971b

  • SHA1

    b4a7af6f9fb9f0d2ed928b063f121cb88ab04ce4

  • SHA256

    0cb59f70aa884ea4213575cc56c943ffec61e3543e6df37a2242921ed85655cd

  • SHA512

    b60df7e0395bacb33b5ed84cbb6e6b524e7aba37de93febe766911680dc863c534922e01fbbd426197a11d8c8951b9c4c59d723e927181bbb51d2f6fa57f1346

  • SSDEEP

    3072:a1sjdBguX8ID8vIVgkplwqYgnWAUjWDUIwLyc4F:a1spBTXNDBpKjgnwyDUFd4F

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2