Extracted

• • Target

    5b1a89a121be41d63d1591fd68c7636bf378e02675a9650b31691a4faa2c1c39N

  • Size

    55KB

  • MD5

    7ab1474ea11a7c098af18fb10b821150

  • SHA1

    4c1da830767ebe7f9bec15312408fb9dbcd92a9b

  • SHA256

    5b1a89a121be41d63d1591fd68c7636bf378e02675a9650b31691a4faa2c1c39

  • SHA512

    58bdb8a7c85704ed60d5c32216e5c263d561245a10c158f47f332930bb009b59fa6c0ea737941ab6557c8eef5d3ded848c4b98d465615eef71aad9aa6b2fd94f

  • SSDEEP

    1536:keO9iaR9OA1DBThW5r9+FoNSoNSd0A3shxD6:ke/KBTh29CoNXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2