Extracted

• • Target

    b1ca733ddc069ea5883523bbcce16e15996c9f8ef0f559ff524fcb46b3ab8ae7N

  • Size

    45KB

  • MD5

    ca74a311db186526480217cea1ce9be0

  • SHA1

    cb851fabd3dfc861c38d3106a5016fffce57b11c

  • SHA256

    b1ca733ddc069ea5883523bbcce16e15996c9f8ef0f559ff524fcb46b3ab8ae7

  • SHA512

    1e1f0b04324ad939a139226aeb82767bd51b62eeadaa2ce48266974089115bc3e008f8248f084e32d943b3a587ab2d314f1b3a9e3dc213b6cf17b503d279fce3

  • SSDEEP

    768:IuWqfEi9vZORdN9sFTL6HM6jCr0an+C9nlcZmpRpZn4444Y8w/1H5P:IAEi9hqdN9GW5Cr0CompRj4444Yzt

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2