Extracted

• • Target

    42c6c10dac08914b5a76ebf1c0df7b46ddc4c80bcbdfdb9482e3c0d51ff8dbe1N

  • Size

    45KB

  • MD5

    5afe203b58b94af69543a87c4d6c1240

  • SHA1

    9b655285922e2ac5007e4589833fd5cea1f16288

  • SHA256

    42c6c10dac08914b5a76ebf1c0df7b46ddc4c80bcbdfdb9482e3c0d51ff8dbe1

  • SHA512

    481d574566d596a498cc493899aa981ff18041b144b5a3d77bb6da689e611b44420d05d7ce126c42cc670dd0f55f769908ee085fe248ca14c4ff3bcbdea1195e

  • SSDEEP

    768:Z6o4xCUgrUuypEN38IMgMb8AWEUaRCVROLBBHsCPfZ/1H5n:ZJ4xduypEN3QgMb8AJR8ROouN

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2