Extracted

• • Target

    9755f3845c5b8baaa7159314026f3e67af334f659ea575f6a3ad1858517fc840N

  • Size

    64KB

  • MD5

    7e2185d4fe367194f5a2986ff5b2c1d0

  • SHA1

    6a0583d6472d9d1b5634f9297da7a25a262ca8cf

  • SHA256

    9755f3845c5b8baaa7159314026f3e67af334f659ea575f6a3ad1858517fc840

  • SHA512

    4eeede2e39fa34dbde41f57e492dae6b9ab869fccf8088bdea083f0c48851889c1b9ffbd6a75a5f219b70346352bce5b650c7b6f532612ec43324e5a333e4127

  • SSDEEP

    1536:14e94ICiyClPvRHMeVQijz4KxhQwsXDoLyRvdnl1CvvIZXUwXfzwv:14oCuBQwsDoLyRVl1CvwdPzwv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2