Extracted

• • Target

    e161c37f7020ce410867b2b548f7bd0dfe3b0a9c82b7222cabb3490960cc01e7N

  • Size

    64KB

  • MD5

    624540cfce5fcb9af0d47e98c0fb1510

  • SHA1

    7810279322eb338e629b85a5be0bf7797d4d36da

  • SHA256

    e161c37f7020ce410867b2b548f7bd0dfe3b0a9c82b7222cabb3490960cc01e7

  • SHA512

    cbdbc6593883c21ffaf6708eb3702d3a26e4a1018865a724d09e8fea7afacf98baa2efbaeb8d1bf21d497049e5c8761c0c6b4f5866cc3b8fc60d886a6e47ebd8

  • SSDEEP

    768:uG9Flq1uk55kG/4r9RjKZKLEHqmy+9vvK0Cs/1H54FYDWKA2kms8Y/ts/9d2NzY/:uqlMLDT/CuZKZfNjiWyDWrPFW2iwTbW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2