Extracted

• • Target

    660c4e67b0a33a430ed0f248b60c4e95deb30dbbaf623fd03ec2440f219713e0

  • Size

    91KB

  • MD5

    ebef1bb578cea2f3981e5fba005b5629

  • SHA1

    cc94904a5d33e1dec32a832028f5ea0973d5be0f

  • SHA256

    660c4e67b0a33a430ed0f248b60c4e95deb30dbbaf623fd03ec2440f219713e0

  • SHA512

    12ac189ce7b7da463ab81b70b03ec003259cbf580f9d5b470893f15e87be734fbe0f5c009037159f6b0d4333aa047f934170953a326b79b023879c5220c1ccc8

  • SSDEEP

    1536:ecS2IXCczXS2/Xn3EIP2n5PT4v4532nykKvHGVM6bKotic:/SDy2/XXEd3meGVM6bkc

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2