Extracted

• • Target

    bc2644c159b8823137ff62a932d7a7d0d14b4dea3b874bf1350196573056792cN

  • Size

    224KB

  • MD5

    013ace300494f954fbf32cce8ba17a00

  • SHA1

    b5963b9a61ac326e6885f678568dab23c907cdfa

  • SHA256

    bc2644c159b8823137ff62a932d7a7d0d14b4dea3b874bf1350196573056792c

  • SHA512

    32f036d79c749298058b0da49fb8c383c2264e7efaa6b101b7c8ec4a163c34ce31a7b3ff77ab06c8e14023e29fd3faeeb85fef54427f33ef76d2a78996fb42c1

  • SSDEEP

    6144:JSm8yo1JoipJd4s5tTDUZNSN58VU5tTtf:iAipf4s5t6NSN6G5th

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2