Extracted

• • Target

    6965314235741d4e3cc492192f84ab5234344e0d81a4a81c39392a1383a84336N

  • Size

    182KB

  • MD5

    cf960a43f2c44a6bd694e1f25981dc90

  • SHA1

    f816221b6a42a4026dfb1dc6779afe806302d248

  • SHA256

    6965314235741d4e3cc492192f84ab5234344e0d81a4a81c39392a1383a84336

  • SHA512

    3cc99231ea8a100edcca69130c16f40661c90d060d293026d0d2cefb7b0ca3fb287b505fe02e742f272bbfa137248f91272fd84eec96ba27dfd89124bafe9030

  • SSDEEP

    3072:UU8DRywZTX5o24ho1mtye3lFDrFDHZtOga24ho1mtye3l:UfDAMTplsFj5tT3sF

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2