Extracted

• • Target

    5823273c9a40a3c9515dcb9484066a819b6aaae33f6c8df43863e89a3f8ba2fbN

  • Size

    226KB

  • MD5

    9816a6a04479518b7f26c244b50292a0

  • SHA1

    2d43a0b57d3afeedbf6202ffb729a40022348c5d

  • SHA256

    5823273c9a40a3c9515dcb9484066a819b6aaae33f6c8df43863e89a3f8ba2fb

  • SHA512

    d3224a22d04b94f96660d62355455c094c42357fbffc2c59ff0199ada06b2c29412d1c11e3d4588e5b16343e42fa524bde223fa7e224f1fab2bf68a916926514

  • SSDEEP

    3072:OVrVSI/4nUHWpob+iDKcWmjRvDKcpDKcWmjRrzNtQtjDKcWmjRrzNtb:OVrgBnU2poK7xEtQtsEtb

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2