Extracted

• • Target

    dd8a8fa5e3f5f7786c10852fce3cd28d1d088255b86418f4b321f4acb7781558N

  • Size

    52KB

  • MD5

    b2038c1f8c6acc0263ed364e37cc0f10

  • SHA1

    f1af1914143f86e38ccb48736ef6af2aea3cbde0

  • SHA256

    dd8a8fa5e3f5f7786c10852fce3cd28d1d088255b86418f4b321f4acb7781558

  • SHA512

    672b3e749de409c5701d3b50c84463daca48a050635dc7166adc0f4d057ebe79c9c4bb4e1a9408c26e477f90d25832b9226e9e4740f3ba953c16cc79d8887d9d

  • SSDEEP

    768:MayuqSLGigFWko5dxZJI8wVDqqqqqqqqqqqqqqkyqqqqqqkqqqqqqqqqyFuEjf5f:DqSSigFPcx8TwFVlJeMAdKZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2