Extracted

• • Target

    90c9b902f1a285e874c9acd75bab80b8313392616c0bf84165691b10517c92adN

  • Size

    415KB

  • MD5

    9c8ea16ed34db6521f724b29adf5d7e0

  • SHA1

    2ff8ef99df6bbc781b732e39887d1f527ef78224

  • SHA256

    90c9b902f1a285e874c9acd75bab80b8313392616c0bf84165691b10517c92ad

  • SHA512

    c2747588d91d7c2f66f4298747c2ea11a253ac8cf3e5c1fd00d724a4e57e7d0ccd9045010a2d5b3596bf3460f412487634932886f663d6832310141e64bc647f

  • SSDEEP

    12288:T8fVR0BoWj7NtInBBBBBBBBBBBBBBBBBBBBBBBBB0kfBBBBBBBBBBBBBBBBBBBBD:oVOBklp

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2