Extracted

• • Target

    13084c12572abbabb2ca85fe219aa40ef8594cb5f5c7d5c8f1213679e15e73a9N

  • Size

    219KB

  • MD5

    85166a92d9dd608d0fd1a4c447b3fe80

  • SHA1

    82f610169a705920a0174c3d5aa60bfb926b003f

  • SHA256

    13084c12572abbabb2ca85fe219aa40ef8594cb5f5c7d5c8f1213679e15e73a9

  • SHA512

    fac517aafebda93bc30ced3b14288c8ffde8c23d251efba28bde1ea4d4dea3259bfc6fc8cc2c617d806bf7b92caf727e261a925ac93e7751a9e3abbb1ffd4cf4

  • SSDEEP

    3072:db6SKIqVYoXmLvZkRc8PzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:db6B34icSzDOO0aDD4PCxdXXwSfYrwB

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2