Extracted

• • Target

    dd29b98043b6d3a832ba8e3b615c7b2410b3f02002ea009d1ef521afd78a6333N

  • Size

    101KB

  • MD5

    d5420fa4b89a9f2e22dc1672d81d6f30

  • SHA1

    ceb396b36474ae7dce9224f2f94cab3d4bee5734

  • SHA256

    dd29b98043b6d3a832ba8e3b615c7b2410b3f02002ea009d1ef521afd78a6333

  • SHA512

    c4d125253abf8e50837162c9f95f3b1089a3a73a517394644829a43d2ab8da106802e51f329dab12e5a6c0ccc0fb8f86906ca7e3c1c9e4bf18bf7c8a423094aa

  • SSDEEP

    3072:vVGCyo4grnkSSduXqbyu0sY7q5AnrHY4vDX:NntrkS5853Anr44vDX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2