Extracted

• • Target

    5b3bcfd6d9317e56b447eb948c1290195d6c40974f036124dfd337352495a6a7N

  • Size

    97KB

  • MD5

    cf1a6e1977656bb1bbc44536cbef95b0

  • SHA1

    98769ded8eba3e8fa76278b7d5a497ba112f1fde

  • SHA256

    5b3bcfd6d9317e56b447eb948c1290195d6c40974f036124dfd337352495a6a7

  • SHA512

    e7ef1138be7ed9227d4fb33152fd6f169affba7b3bb816669a3ab4fd6fd9df83a47f60afe8c393200eb51e0af4642181e4967cf6b4f7eb41ee5c62b9abc746a1

  • SSDEEP

    1536:cqJpFv9E31UANUNlCXXobiXzc6+ExEmXUwXfzwE57pvJXeYZ6:cGgFtUNweiXzc6+EmSPzwm7pJXeK6

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2