Extracted

• • Target

    0f10b84641cec954697da18cc104c0fe11d379802a4b0955137544b355fd3154N

  • Size

    64KB

  • MD5

    bd2101ef41f32732a0a8eb9b01874230

  • SHA1

    e1b7be51e02a99079192c3821c465a1fef16d1df

  • SHA256

    0f10b84641cec954697da18cc104c0fe11d379802a4b0955137544b355fd3154

  • SHA512

    6f56178dc3d497f311d3093b6cfc4fe5a10ae3854eaed270964c4b64ead7e63306a06b5a94a81af220e77d381bd2240fda75e5ab7df5aa4f925ddbc3ca7d9e4f

  • SSDEEP

    768:KUO7b3qz0lpd6PSBpD4LeBzL+7j1DRpgZvAP5JJJJeXhpgm/1H526XJ1IwEGp9TY:BupJD4Mz67j1DRJMdXUwXfzwv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2