Extracted

• • Target

    2cd4dae910e6ed03ef1f033dad190fbfa39dd4572f0a31930eba57b055a79173N

  • Size

    69KB

  • MD5

    e31805826a119fe11ec59b459c98c5a0

  • SHA1

    7a0ce86fd629084761328d615f93c1b686df3adc

  • SHA256

    2cd4dae910e6ed03ef1f033dad190fbfa39dd4572f0a31930eba57b055a79173

  • SHA512

    7f2d10fdb816a5464cfdac1b6c6283f1bbc666b7453a5c66d2b3960997e2204f9fd6497367b5fa77bf689700d57557a1748c1b15caa76ce72e3012fefebfd277

  • SSDEEP

    1536:yov0be2EhlZum+xwYDsbwDeo0vlVNein/GFZCeDAyN:yov0HEh+h0wr0vrNFn/GFZC1yN

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2