Extracted

• • Target

    d849038a7363a7ac88549ebf877246f32a473c88574b44d9736f94edea49bb7eN

  • Size

    96KB

  • MD5

    0fb92369fbc125ca3c82487d53b9b1d0

  • SHA1

    3789f2d83e331f3261af4c94153969b97739ad95

  • SHA256

    d849038a7363a7ac88549ebf877246f32a473c88574b44d9736f94edea49bb7e

  • SHA512

    96263c73a7faa94fde04f7e2383f7768c64edbcd6280758bcd4af6efecb06f58cf15ccd318c7369ba8217f6c56aec083fd1fcf099298e032e042e6b6955ef460

  • SSDEEP

    1536:M0p4LKduQeoueBYd33VlOpe/glWlQ4lV1DDjDDPDDjDDjDD/DD/DD/DD/XDDDDDs:nduQeoubh3vsQDDjDDPDDjDDjDD/DD/o

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2