Extracted

• • Target

    ce2212466c40d573280f88ded2bb5aa5e1b5b8c115a62bdcfdd1f6465dc2ea1cN

  • Size

    64KB

  • MD5

    ac6c1da9045886499dc920a1339bb970

  • SHA1

    70a3150f7ebd3b271c0f75b9da539d292778fa22

  • SHA256

    ce2212466c40d573280f88ded2bb5aa5e1b5b8c115a62bdcfdd1f6465dc2ea1c

  • SHA512

    4cfbfa816f88fc11156a45e55f856114fb52b444605a4b04ba617e6a09bee75d7f018a276fab76f5bc23a8ed5695dfe003c834cd1bf696c1c09f8ce4a7b8addc

  • SSDEEP

    1536:e0R/kq9ZULbL4eTk7HENaiUWyCdrPFW2iwTbW:e0/kq7ULbUWkuaiUXCpFW2VTbW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2