Extracted

• • Target

    2c4e2c3d8fa56c72f526ed632e6b5ca0823599c47ecca387dcb9c47d0b475815N

  • Size

    91KB

  • MD5

    f18b085212dfff7d0a5b6e21b6e3cf10

  • SHA1

    2ccf4fb823d21eed99c50ef0f7b16c9212fcdafc

  • SHA256

    2c4e2c3d8fa56c72f526ed632e6b5ca0823599c47ecca387dcb9c47d0b475815

  • SHA512

    e751703f9b2f453af72b51507fa9701ef4a592d55888097a3b8edf3834d8374f32a2340088f2580c79a6ab6b446ab5cf98fedd4f8c3599dc87bc49f7525e98da

  • SSDEEP

    1536:HlELK+l2W2tPbhePu8zN1Tko1tUI7AtDTWp2AJ9Y9SYnBJtY:HWK+l2nt7EO6cDi7CSYnhY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2