Extracted

• • Target

    ad9db33d56f2b2c8749e8048b5eb925956d93d8c4f9620dd41a90a3af3253838N

  • Size

    67KB

  • MD5

    cd0a5ce0f43165bbc33b98b7d988fcb0

  • SHA1

    e7e75f36ae2f5721c6b312c371252e42a51b6b62

  • SHA256

    ad9db33d56f2b2c8749e8048b5eb925956d93d8c4f9620dd41a90a3af3253838

  • SHA512

    061097ff5de4636da377cfeb2afd97e4a870f7abcdc8669f80cf031f2e02f05f71c05ae785f79bbb1b2d97257e3ceb502edef62ea152f5dbe7fe0cf958ada242

  • SSDEEP

    1536:H33QTKWgKXTQDAAJPg14sJifTduD4oTxw:H33kgKXTWAAZg2sJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2