Extracted

• • Target

    41e52eddce86ebaa3c4c6ec480ed4639c006c79ddb9757da97101a031f1ff210N

  • Size

    55KB

  • MD5

    d815064611d4995afe40c76e5d7c6700

  • SHA1

    89828ec00291b0ff9795e28607119baafe90bfda

  • SHA256

    41e52eddce86ebaa3c4c6ec480ed4639c006c79ddb9757da97101a031f1ff210

  • SHA512

    5f2b985842a691423580f28ba35b92b5196c5b2f3e704ee4118940cf49df318c358a48be30c21ed989a08f372cd905f67081de426e0a43a5616fc095d525109e

  • SSDEEP

    1536:BiSyEP4z1XsDiUJb8KPiJFwy02TidCQL4iNSoNSd0A3shxD6:yWJ+z+wkfNXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2