Extracted

• • Target

    c5ad59b81aaab263e3e56ecdf9d40c3dc064055c910c26b704365670898a2467N

  • Size

    89KB

  • MD5

    6b6f0a4c6ca3f91dda3ebbdda476ba20

  • SHA1

    3a26a537d4f073352302de7e3a5ac40bfb0ff5cc

  • SHA256

    c5ad59b81aaab263e3e56ecdf9d40c3dc064055c910c26b704365670898a2467

  • SHA512

    0f1ae3b00315b2973d960dc4f7f1a441a722b6b8af60edc510ed7a82da123f45e096114ae831e2663b8d1d5a84bd8038e0611ebcdb234e192fbd2b9bfce55050

  • SSDEEP

    1536:lzBy/5fQZe2GIIcD0pDKh/2XtCBCnXhwRQsD68a+VMKKTRVGFtUhQfR1WRaROR8R:lzA/5K0I7oDKh/2X+CnXhweNr4MKy3Gn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2