Extracted

• • Target

    f10d807bf8c78a302649ef2b6032c799deafb7935d21d6e91ad8996d0e7ea2f4N

  • Size

    67KB

  • MD5

    cd91b3963597137202990d1426d7d9f0

  • SHA1

    7f1d993e62ee5619174a14d219dcea5a976e8217

  • SHA256

    f10d807bf8c78a302649ef2b6032c799deafb7935d21d6e91ad8996d0e7ea2f4

  • SHA512

    0ce28fae3edb642f8f9278e7ed157a03594b6f012af8979d8c04a4d40fcb035285fd9e227159e4e04a1c89257fbb6665eb9bb1a2a364a4fa040547f4508bfb47

  • SSDEEP

    1536:BkFXWsMNfiEp+2sXFvd/Egqc2ssJifTduD4oTxw:WFXZEprINJd2ssJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2