Extracted

• • Target

    4b7fde62f19b5559dabbb7629ac43bfcb17110891746ac89c1e6c6942fcd7f6cN

  • Size

    45KB

  • MD5

    82514b26c4bb89356dd445489f502e40

  • SHA1

    f17937a3f759cd109b227e0b4b0d1d3418799143

  • SHA256

    4b7fde62f19b5559dabbb7629ac43bfcb17110891746ac89c1e6c6942fcd7f6c

  • SHA512

    0fd35f09958d6b401ce53977a2d0c25284e5c45d165d715287d56270c15f43e5b369cf4d53c4c0638d726b717ce370a20d447bd2eef1563e38f8e6e586ba0d53

  • SSDEEP

    768:IospSlQlks+g0VCtoJSKev9qO32jDzYsLTHOn/1H5yCf:qSob0VC+It98B0we

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2