Extracted

• • Target

    1d99da129d5a5a23aa49ed6587928715fca82d8b4118c0ff9c3c09e66ce966c1N

  • Size

    69KB

  • MD5

    9c1f4d47d0beda5b7217de915723ba60

  • SHA1

    e499989c17176b983a1bc705c4e95e54a5e6783a

  • SHA256

    1d99da129d5a5a23aa49ed6587928715fca82d8b4118c0ff9c3c09e66ce966c1

  • SHA512

    0695667701ab42967b8468f3d78a818ad35984556117f7af9f1968444cfd4a9ff9df790374e07692336d1e961fbdbc08bc32dac5e5ffc189d6b45c0cd877489e

  • SSDEEP

    1536:0X8I2Mv/YPdZENDBI0BwKsMvHWiNein/GFZCeDAyN:Cfv/8dcDBI06NM/WiNFn/GFZC1yN

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2