Extracted

• • Target

    2d449c78d681f8e1f0926a83fb368aa321b4e5cbf850c76189714591bb58c9ea

  • Size

    101KB

  • MD5

    e32ad565610e802e3500104e0b12d422

  • SHA1

    534d7b0cc45212ff4f5a7d2c0f83be557778db98

  • SHA256

    2d449c78d681f8e1f0926a83fb368aa321b4e5cbf850c76189714591bb58c9ea

  • SHA512

    80ec49b3ca8f4315e60b47ceacd85fd324491ec6198fdf0bf1262d04c7fb00873dad0c0089e6cc22073bb86b03258634a1221a3d982b1d5dbbcfe120f5e5deaa

  • SSDEEP

    3072:5AFI67PdPFeDnZrduXqbyu0sY7q5AnrHY4vDX:wI67Pj6w853Anr44vDX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2