Extracted

• • Target

    4cfbc6371279fbb1e7e3a0176bde7cc6e4c80afddac7decb6de5baf080061549

  • Size

    512KB

  • MD5

    c39d8ec9b0afd4b3ee2322f03a430732

  • SHA1

    1982c50cb33dc57f3d8d0afd7a331975b29852a8

  • SHA256

    4cfbc6371279fbb1e7e3a0176bde7cc6e4c80afddac7decb6de5baf080061549

  • SHA512

    dd478962054f702b1f3816f5fa13f8b457595b6afad3c8fe5cfa8c358cb6f6dd7bb8888694fdf970ccb8bd3dd9d2975398e8cd41e9d8c9b7f1e29f542e39c80b

  • SSDEEP

    6144:iK9zC0qrdM853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZ:b6iQBpnchWcZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2