Extracted

• • Target

    abe08afefe31815e0421b61e255ec2e2395a68d55aec515855bbff4932884d8a

  • Size

    45KB

  • MD5

    4a546447644d3bc6cdb36e59bb2ba019

  • SHA1

    4081ffa65a06568a52593f96afe325add1539943

  • SHA256

    abe08afefe31815e0421b61e255ec2e2395a68d55aec515855bbff4932884d8a

  • SHA512

    7a760ecba4f3c4b5e22ccab7664d695b46b70faa622911746920d3068b57b16a10a8f317a56938d9f81c37dc8be996d32ec540dbd7786f9b9eeef7c5adaa9f3a

  • SSDEEP

    768:9m57zy22RmIFFMlZGmYNooJBulno0YUHldGzF68dctAJE/1H5HR:0NWFFFqZ1YNoo/uVo0ZGnclhR

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2