Extracted

• • Target

    291e25a84a0c615f8c8f6ab0f01f8a8f7a78193086c5ca5995ac07c36f005448

  • Size

    67KB

  • MD5

    bb590c8be8b38bd3a3818bce107bb18c

  • SHA1

    71c688d47984057286cfeb8e195a1942f5058c4b

  • SHA256

    291e25a84a0c615f8c8f6ab0f01f8a8f7a78193086c5ca5995ac07c36f005448

  • SHA512

    07ce22d3c79e2b4abc43a1ebec38ecfd5730143344aba5a3d87c5ade07f6043bb65e9920fe25d0ea619a679bdc074090cdf3a14429164f2bf2eafff091b8d315

  • SSDEEP

    1536:hmvOPgl4tbrVSyevqfFPwfZELfJN4NUgY2yxLsJifTduD4oTxw:cY1tQPvqfFPwxELfJuNm2y9sJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2