Extracted

• • Target

    3da32bdafc48730f74ac3fcd24136a4f2f4b6e918a1d4bbfb0653fb8967478cfN

  • Size

    64KB

  • MD5

    f7deb07731a75c3fcb57b70ecb106660

  • SHA1

    58dbf5cfb556057113a6296657370d642959a542

  • SHA256

    3da32bdafc48730f74ac3fcd24136a4f2f4b6e918a1d4bbfb0653fb8967478cf

  • SHA512

    4468012cc034be175094b9648a57ad28426acf330420cd843524cb61200f08ad6e4c1edd5a1c652fad91fb0db8105e140649d25cbdca1f4c204f2fe4a0c527e9

  • SSDEEP

    1536:dYzD3Ro8FzmPH2luSXIaYEWy9rPFW2iwTbWv:0D3u8FzmPKuS4aYEXJFW2VTbWv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2