Extracted

• • Target

    5e875f6f3e52e9fdb7218530be20c246d8bbf0d37515691f4bb906f0776c72a1

  • Size

    144KB

  • MD5

    b0744417dbbdbc15182bb19ce87c08f9

  • SHA1

    8d15307301cd0bbd4cf48517ea685630a3c10b90

  • SHA256

    5e875f6f3e52e9fdb7218530be20c246d8bbf0d37515691f4bb906f0776c72a1

  • SHA512

    8b80cc018360c4d55e454e7286f44d778274cbbd87873bba2dccbfa99d220460ec36ad0ce5bf0e19bbe34317a65ca8434a56dc709053234a2accd5b2da79da87

  • SSDEEP

    3072:ISyPGwx/G9P1nfVydAra25Qgb3a3+X13XRzrgHq/Wp+YmKfxgQL:REx/S1nuArn5t7aOl3BzrUmKy0

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2