Extracted

• • Target

    2f86d61614b443816124c6d7719f5f5625c67874a47dc28ea5cacc5dd453100eN

  • Size

    45KB

  • MD5

    d771c802c5581b413b3a170d44895710

  • SHA1

    fc4edc4ae44aa662ce866e4f026ccc602ed7bdf5

  • SHA256

    2f86d61614b443816124c6d7719f5f5625c67874a47dc28ea5cacc5dd453100e

  • SHA512

    400b04357cea01a529fcb87bce735bfd70e7b1bae47d9c1313db46c730aa6f384a6063f88d86ab6652cf9de08bc384c4d13230b61df7ad3689e4902e8b13dc16

  • SSDEEP

    768:w1cDVEVOEZ+VML1qTbkEoRZevkNOq0Ri7HrIHmtFT7gts5H5zWUeL/1H5m:w1c7VMgTVoRZevAeigGtN7gt7UQE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2