Extracted

• • Target

    956d097b4cd4d57bd188643f4bbb10841c09f55f24ad33a9a156cdc9b0d074a0N

  • Size

    97KB

  • MD5

    b0770d6def3dfdd7df190f51caac8480

  • SHA1

    b3e49acf392f7014e265a87fa6a28a65a7825fc3

  • SHA256

    956d097b4cd4d57bd188643f4bbb10841c09f55f24ad33a9a156cdc9b0d074a0

  • SHA512

    f39beb702fc6a488e23312f6d002391d9840ccc15bc0601b40c3d1270400a10e74a7d3c25e46c01902325c00c92fe4fe5459a5bd00821df5f341f65c373324b9

  • SSDEEP

    1536:pjyDVPKlrkdUkjV+w67XUwXfzwE57pvJXeYZ6:8DVPKlrAp+w6vPzwm7pJXeK6

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2