Extracted

• • Target

    1a48aa8ca991c3070579cd53c9a99687c6ca208b996cd9f1d49ea9bf0cf18f40N

  • Size

    800KB

  • MD5

    a9a027beb6532cbb19146ee21c0dd9e0

  • SHA1

    4d15b0b1dfacef1d4ae756f8dd2f3c783b6374b6

  • SHA256

    1a48aa8ca991c3070579cd53c9a99687c6ca208b996cd9f1d49ea9bf0cf18f40

  • SHA512

    cca0667b907fab2d3f2f872579a2142890ec13e542ff1bf406f9e7853bf19b52e1cdf8380cd661a2ee3c76465eeccb22c243312594517feebf2e793ddc6072d2

  • SSDEEP

    12288:K4/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KFum/+zrWAIV:K4m0BmmvFimm0MTP7hm0BmmvK

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2