Extracted

• • Target

    68398d544bfd7f91c3847469ac3cecaabc9118b7452cd78754dff196a2536ee5N

  • Size

    448KB

  • MD5

    a7e42566248b1c473b20558d60cdd5b0

  • SHA1

    ac08e6ef16e7a2ab201a032e4f8caac0256d09d0

  • SHA256

    68398d544bfd7f91c3847469ac3cecaabc9118b7452cd78754dff196a2536ee5

  • SHA512

    a56a79ee18ff94ae17106b83bcf639cf539177da7eddec613a4c4383b4a659e6fce2940d7793b67f21429ac492d7da00c219efd3e003ecb8b5d62bff8636eaa9

  • SSDEEP

    6144:qJV6s21L7/s50z/Wa3/PNlP59ENQdgrb8X6SJqGaPonZh/nr0xuIKjyAH9SKzuCq:v705kWM/9J6gqGBf/sAHZHbgdhgi

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2