Extracted

• • Target

    860ba296d256708e6d2eadf87f32770454c38ab2491b38c0c4683e94b62f295aN

  • Size

    64KB

  • MD5

    c4b9e2a7569bfed8739f0ab3c5f1e4d0

  • SHA1

    6dbbd68ab17c5c69abb7b1c02c11cea883c699d9

  • SHA256

    860ba296d256708e6d2eadf87f32770454c38ab2491b38c0c4683e94b62f295a

  • SHA512

    07f328f23a13802e7cf46a7b7a53c767a858eb0894a2c26a28ad562961f2bf5e2c8e4fd9511312237bb37bf277f780660e33e6ee6f717b57ad591da2bce560a4

  • SSDEEP

    1536:Rux+r99Q7UfQ1do78SS9EtYWyWrPFW2iwTbW:8EQZ1dooh9pXCFW2VTbW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2