Extracted

• • Target

    29691cd618cb47aa998d319ac61b929bc2562408749130b0e839e96717d0fefaN

  • Size

    59KB

  • MD5

    3f385ed16b86f3f22a5055cba931be30

  • SHA1

    994d96383b8c99eb72784f2e672cac73ac04269b

  • SHA256

    29691cd618cb47aa998d319ac61b929bc2562408749130b0e839e96717d0fefa

  • SHA512

    c62f261f5cf0384c0232085b5acf768f58f5fec73eb7a0c00e74e21f73b7bc38a859d99b98f718ed17927cbfd43c54db5970f5806ca2a3b1e4052c0e967c255a

  • SSDEEP

    768:iZSXHUfJTMCDI3e1DuolFrZAiDdJXjoSILelvfsUJ4CBU4Z/1H5u5nf1fZMEBFEI:7XUfJ7MiuozrILcbXBTMNCyVso

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2