Extracted

• • Target

    f0be00e660589034482c41126eba9319c75081839bf692b03e5ef1f3ae7cca0c

  • Size

    368KB

  • MD5

    be6f1320d63b113da5fa94daf54ba5ae

  • SHA1

    545e91caec44666efbcc7ef1782a1de900cdc768

  • SHA256

    f0be00e660589034482c41126eba9319c75081839bf692b03e5ef1f3ae7cca0c

  • SHA512

    01239ac6de31c945924341d799c05d298d52ad9181ba90c718992ae4d748682607e3c65d42aafab9a77fd65d16e8d7dd5f06d332d2679f6649c73570987ea4e3

  • SSDEEP

    6144:H9Opetv1U9cZ6nYsYOmziQpKcktWt/3t1LgkfQO+zrWnAdqjeOpKfduBX2QO+zrd:cpc5J/+zrWAI5KFum/+zrWAIAqWiO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2