Extracted

• • Target

    4155015941e9b68d99c41343f43ca0e074fa1f680e7e3e3eae4246a4dd1d7315N

  • Size

    512KB

  • MD5

    e07468119118c24ed175db2a6a9f8120

  • SHA1

    c1ea7e23a337dc4d627cf325c83e07704246142e

  • SHA256

    4155015941e9b68d99c41343f43ca0e074fa1f680e7e3e3eae4246a4dd1d7315

  • SHA512

    0517952f04196667cb6664663f035ddee7e70e3c1f9c841dfc416a5124b92a397e47a75fac421538474ce4caa3bd13715279f552bf596c077be8d7f6974e5aa7

  • SSDEEP

    6144:kBmDb853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZ:FQBpnchWcZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2