Extracted

• • Target

    e0f5429ababe33b2292a9b2ed14fa769858ca3cf6acd445766820de1de5f0ff1N

  • Size

    97KB

  • MD5

    d22e8b2b6927faef161abf2ef8d29130

  • SHA1

    292317d8efbb9dc9edae84fe9b4c468dbcbf2b7a

  • SHA256

    e0f5429ababe33b2292a9b2ed14fa769858ca3cf6acd445766820de1de5f0ff1

  • SHA512

    6f68ec3c26a8bab05a2999b44d0330396e488261b3d68d9d54691e293fc62cb0d2e6a01c59c3061abdd4576b68002a9906fdce67ff8394f317bf3c0ed4727c9f

  • SSDEEP

    1536:lb78DrpprslvJ9QCUDamg2XUwXfzwE57pvJXeYZ6:lb7tRmCZmxPzwm7pJXeK6

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2