Extracted

• • Target

    827651db991e29d8a349da1a873a2ae743158e42733180bfbc686b20a8ce6e48N

  • Size

    415KB

  • MD5

    16e3af0492898a941625424af4241760

  • SHA1

    35804bb3d75cc96fdc9627723eeca0cd49c43bf6

  • SHA256

    827651db991e29d8a349da1a873a2ae743158e42733180bfbc686b20a8ce6e48

  • SHA512

    c8f5ed59fcb0fb8cf5945451974ed98dfce4f3a26d68a5d987d4e4e8214a0cb5e25a4a11684a3eb765201f6eb532aa9f888356957e83a39fd2ee2f69a2181cfc

  • SSDEEP

    12288:cHp7oWj7NtInBBBBBBBBBBBBBBBBBBBBBBBBB0kfBBBBBBBBBBBBBBBBBBBBBBBh:CRklp

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2