Extracted

• • Target

    9cd1535a00bc5d865d54524d26eb4ac7449e04e7324801bc355769b2857950c4N

  • Size

    45KB

  • MD5

    fb3ac5884a882f17c2f6d5be20a57e60

  • SHA1

    9a52400d9b6669416cceca36c3178f98b5e6477e

  • SHA256

    9cd1535a00bc5d865d54524d26eb4ac7449e04e7324801bc355769b2857950c4

  • SHA512

    d75a513021f426b225525b83e8de35ff960cc0f66cc53f2aa36d1a35c6e20c0118159da8a3516fd32949c30a7daaf26333f605813bdcdce8668edaa25d86045f

  • SSDEEP

    768:f98X91Co0W6tpfac0MSg2MknI87q6/1H5:f9ICE6tQcDwMkIwl

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2