Extracted

• • Target

    79b69563baf2f45b5689a65208920cbc88fe83ba67932901ac4d877dab45411eN

  • Size

    67KB

  • MD5

    5390cb212a558b1aead32ecd0d4d9690

  • SHA1

    910f091825ca038c6adc643ff7a570fde5ca01d8

  • SHA256

    79b69563baf2f45b5689a65208920cbc88fe83ba67932901ac4d877dab45411e

  • SHA512

    c749c9b5b8b234a1c7099e3fd217c6d64e929403edfd5bba661a07436a6cd7cad6fcbe617ce607333d4a2c8a560e7ff761d9b084014a42a642937d10442e4a69

  • SSDEEP

    1536:uo6ShHocGkpPIb9LT7PPpsJifTduD4oTxw:z6KIrn9LfPPpsJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2