Extracted

• • Target

    681b9666a51828206771b2e65c987a87bac5fcf9ea66de875d00768e3c93cc66N

  • Size

    52KB

  • MD5

    b27446ef32cefb97d4eee8b0842c9400

  • SHA1

    cd4158ddf682ade673103bd8f51ac0ca21f90f3b

  • SHA256

    681b9666a51828206771b2e65c987a87bac5fcf9ea66de875d00768e3c93cc66

  • SHA512

    813d71c9a9f2c7824e20bc77db47890008de81747bb95328a57ca604b55d2b841175dae3344b7296a843f8e226c93f8a307be7720a66b23961757e01dc9676c1

  • SSDEEP

    768:UxMCs6uGdeBozDyFZtj+QJRhWWtuMjnpRzUu/OuTt/1H5F/s31MABvKWe:cMCsCPvyFj+MWMr4u/OuTns1MAdKZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2