Extracted

• • Target

    1525ea3d81709fc05b9b8d22edd328772f81b33fc9e892a5599881eaeb899aeaN

  • Size

    91KB

  • MD5

    a76847716f3614f46c0d655b331a3210

  • SHA1

    92d1ea0d0988c2b0c49545d000d3f41488d02ba0

  • SHA256

    1525ea3d81709fc05b9b8d22edd328772f81b33fc9e892a5599881eaeb899aea

  • SHA512

    f5b7ecbafd409f3fe1cd3009bbe93fd23a96063a9ea6e52df320f99e574d8f502b37f5c0d5e7f0dd39b1f653a90df1e2aeebeb60f62f184a5a86c0faf575ddcc

  • SSDEEP

    1536:6bk9Ctxqw0HoGan1oD1lLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXd45J:QWk8HoGa1ohlLBsLnVUUHyNwtN4/nEB9

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2