Extracted

• • Target

    187468d7cfb71abdba50e7a9b097366bceb20b165d23be676a15482035036f0eN

  • Size

    45KB

  • MD5

    1d63a14efe1bf0fe2869192fcae81760

  • SHA1

    fca8ef5debdde78466e82ef79c40e004ea57b80f

  • SHA256

    187468d7cfb71abdba50e7a9b097366bceb20b165d23be676a15482035036f0e

  • SHA512

    fd30200b0044a66193efec230647d4d4fcebc5391acf381ef79fbd78e14bf54f056d32b4dc50425a89a185568128e03786745cbdb349978cd350886ce14d44b9

  • SSDEEP

    768:Igdbrclvf1X9NbB7B70a05KpBfsQy2BGjMrhJvJegWmQOgz6/1H5J:Ig5cJ1vPfpBfsQyLMFeTcH

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2