Extracted

• • Target

    de28f1627d2f7eb73960e4eed056f9121a32000e7c0b073b80b9ee56640b44feN

  • Size

    55KB

  • MD5

    be2e740bbdd4ccbfea51a6b1b79da370

  • SHA1

    c567fff6e91d1ac330a9ba4f052fa0d551b1e727

  • SHA256

    de28f1627d2f7eb73960e4eed056f9121a32000e7c0b073b80b9ee56640b44fe

  • SHA512

    bd251a4f34e2e3b9bb038f611478479848b4105bf1a435d8f95c4a7da9e3e8a7b5c80a1b30c12f2ac0a8071cd6224171da1b9ed9b6e9b307e003078ab1b60027

  • SSDEEP

    1536:VzRkz/lIdPgmSNQrhHOzaNSoNSd0A3shxD6:VzR1Pgm99HKaNXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2