Extracted

• • Target

    4bf661a9a5643fdf8bb46667730e5106e4cc926ee0304979108797a7402b927fN

  • Size

    84KB

  • MD5

    1b6be79a17974d6fdf2e90ba530d2200

  • SHA1

    6eee7dd95cf5cf9dd95b2b579f17476ecb77e8c1

  • SHA256

    4bf661a9a5643fdf8bb46667730e5106e4cc926ee0304979108797a7402b927f

  • SHA512

    3592a7c89e7c9674c43e0cf45185d8f22d381e3719492a7550b15b7bec1d6934f2b80536ef450fe1d30aa442c1822c3535a5e52bc9ddf4ef2efda8c3e4e373d4

  • SSDEEP

    1536:TR6+0nCmA1JqbSSJGxYYwPN0feF4dtuXx08ANZLvfPDyH6n8dEelLYR7xeGSmUmF:T909SSAGYuN0fXdQhQ3PDyH6n8djlLYD

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2