Extracted

• • Target

    a4b7554805f83949081d7d2f8f5706c5b83a584023d752a4316beede41eaa15bN

  • Size

    91KB

  • MD5

    092646af51183e21e95372dc9a8df360

  • SHA1

    b0f3df40a7ba395783a2c1d64013cccdbef73ccc

  • SHA256

    a4b7554805f83949081d7d2f8f5706c5b83a584023d752a4316beede41eaa15b

  • SHA512

    eda6f7e67c6952b147170ef14e9438dfc5fffe2ff0f8bb7b5c1d961650abed29411e6a1b919b364e9a66d0270fdc7f40b596c02204fdeafb95152e3de85efdcc

  • SSDEEP

    1536:r6/JYZf+RwynxkKyg7plLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXd45J:r6RYZCwynyFg7plLBsLnVUUHyNwtN4/G

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2