Extracted

• • Target

    9257222774a57087d93b9f8846dcf8a86a108f1f647696a45d63fe385190075eN

  • Size

    97KB

  • MD5

    f80105c1206451879084f1c36af6f560

  • SHA1

    d865e6f0ff02c373589c5fa3e6849d5e457d9c68

  • SHA256

    9257222774a57087d93b9f8846dcf8a86a108f1f647696a45d63fe385190075e

  • SHA512

    1ceac9bcd87834e2bc4c91cb73aed3f576e3f43ac56537c0fde26627601f63ba9e71c59e5aa02932f59f6ea680a89c1c6a89585046aaefd4409a9cef8f333d3a

  • SSDEEP

    1536:cT0m2h+ys0iQLJPgQ5hXUwXfzwE57pvJXeYZ6:20tfiYKE1Pzwm7pJXeK6

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2