Extracted

• • Target

    93ad989180e0b5cf7e718777babbbd5e720cbf04921c8dfa8872fab72fab5db3N

  • Size

    256KB

  • MD5

    e048ef6297994e810a5731bb654c2ed0

  • SHA1

    41b3eeb6836fc093038dc181872d7bf51f775e31

  • SHA256

    93ad989180e0b5cf7e718777babbbd5e720cbf04921c8dfa8872fab72fab5db3

  • SHA512

    fdd46ae451729c397cf9b64a94003f7d34b23b8b9183260818ccc8597a02f1a511e7542642eb4302336bb5be1089df36a1d4c4bcea6c79352069fd634bbce700

  • SSDEEP

    6144:cECzU5kHzD853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZj:UzgkH/QBpnchWcZj

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2