Extracted

• • Target

    daf0f004cc93997ec519911131775fa66de312794cdcf9301e0686f0c1d68b7dN

  • Size

    91KB

  • MD5

    83c2893af4aef372b4441afdb2e2ef90

  • SHA1

    d6b841828ede1829c8f5a1af34971b49206f85d1

  • SHA256

    daf0f004cc93997ec519911131775fa66de312794cdcf9301e0686f0c1d68b7d

  • SHA512

    e9e2463f3e597e999416f5ea2f9cd9b81e919688c36da0db74f9ef81ecb7260b3647d502d03763bff32fda869e8a645f4ff7572d7d4f867949e76b7a36f20b29

  • SSDEEP

    1536:I7/lNWCp2tNFDeTgMFxyH+B6GA5ojlLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaad8:IblNWCp2tmTgYxyHIA6jlLBsLnVUUHyM

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2