Extracted

• • Target

    5f5d88751bbf0c90dfd28762ee2995a452daf2f2f609e0b112248fc7bc0a7135N

  • Size

    422KB

  • MD5

    f66f92a25a12da3ded7ec166f3190bc0

  • SHA1

    b02ac5b1d4a90c4934af203889b49e5618a030a4

  • SHA256

    5f5d88751bbf0c90dfd28762ee2995a452daf2f2f609e0b112248fc7bc0a7135

  • SHA512

    53fceda3484409fe30fa1e68764b90d0ef21f334cb5c2cc32b9e33ba17a4e3e4ebcf59866c05f19e1349f69b46b2a6623dd854b88cdb8f146ee33408f0e68276

  • SSDEEP

    6144:66gl3babO6FSPnvZU1AF+6FSPnvZhDYsKKo6FSPnvZU1AF+6FSPnvZq:660GaXgA4XfczXgA4XA

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2