Extracted

• • Target

    2c457b3adf3bd9c463effe9334ddf8c8bbc37bbe54c27d0e9315fc1f3a04f149

  • Size

    67KB

  • MD5

    4db5f9c950874fcde460f687de773630

  • SHA1

    a886daaffcfd9343832f8417e746b9ed6e6c093a

  • SHA256

    2c457b3adf3bd9c463effe9334ddf8c8bbc37bbe54c27d0e9315fc1f3a04f149

  • SHA512

    5fb5182a7e86d5067fcaece13e3ce52871d015d7987b742304baf5d7e4d9cc52e56f472165d141a4cb21d2643c0ea58b2a150173c56bd4fba134ab525a1324b2

  • SSDEEP

    1536:rdyqd6jrkztvV4KwSq5d5lK6qbosJifTduD4oTxw:rdyKgYz8KVgI6sosJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2