Extracted

• • Target

    85cf01f6316fe261fb5ae61c799e34b97cddd2a2c5ab1afb73b38d97c9b88e72

  • Size

    512KB

  • MD5

    73f6659760ea8ce5ad67c8f2831a6c68

  • SHA1

    4550cd469d2039360227cdbf890c441f64520005

  • SHA256

    85cf01f6316fe261fb5ae61c799e34b97cddd2a2c5ab1afb73b38d97c9b88e72

  • SHA512

    056f8d40ff5a1545168256e322cb9bab41b7e71269a151aa3440effa9951717a287ea066225ff17a332f130ed87cbd50b3c671ae13340f906b55965ca568a700

  • SSDEEP

    6144:CGosfMkLKR2G853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZ:DosfjKRXQBpnchWcZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2