Extracted

• • Target

    1068fdc3836f6255d8d56e09dd2fbc06f223b4f74c0ead9f41271ebffd755a89N

  • Size

    97KB

  • MD5

    f5907f39a8ffb9443924bc7c78cdd500

  • SHA1

    b921f3f5d377886f34a7b95051f1e0a74a28ff44

  • SHA256

    1068fdc3836f6255d8d56e09dd2fbc06f223b4f74c0ead9f41271ebffd755a89

  • SHA512

    1fa9fec0508413687062a4046340aa9b3041062cefe33ba10dcc2eb0f948e8b884b8393f6cdcc1419b359294d386b7fdf0d537384c26a5aadf72274b0b577cd8

  • SSDEEP

    1536:0lsZuQBfO/x0Ofk5irXUwXfzwE57pvJXeYZ6:f7nOfR/Pzwm7pJXeK6

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2