Extracted

• • Target

    3e4610ee3f432a124b4b280604d3c2620cde65b93725911be4d8d150c49dfa76N

  • Size

    91KB

  • MD5

    31cd49fb6a5c2bd07d0ed849f8fc57b0

  • SHA1

    d7b4bef4566da5bf8ad2fd3aa3fe21abb4c9580b

  • SHA256

    3e4610ee3f432a124b4b280604d3c2620cde65b93725911be4d8d150c49dfa76

  • SHA512

    8d259e851391f6b772adf856b047e96eda7ab5548c840e6545226ba77646ce9a8c8d87420dd0f9426c71661e4fe38c3b940f2a134c83a096419de7ef0c4876f9

  • SSDEEP

    1536:SP9rlDu9GsdTXVxMmlt53K4p9PlDbb74P2TO53:S1lDCvTX/c4pllDbYl3

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2