Extracted

• • Target

    5755e91ffe445606f1dd55d4ae96c0d698d777b37cdd33c6677c7153a487b8b0N

  • Size

    55KB

  • MD5

    e1bd12bf92a006ed93833188d7c53860

  • SHA1

    4146a871f84b3859e9378c0466d444a6b9fbb49e

  • SHA256

    5755e91ffe445606f1dd55d4ae96c0d698d777b37cdd33c6677c7153a487b8b0

  • SHA512

    5652c4cf6d0c5e2cf1c4fb5bde08677a775a1ef4be371a318c052b2ac20bb7725f1d571aa6cb3036b698487c4b51a7f920e45f7a005365e835ad4e27f60b845f

  • SSDEEP

    1536:nREhtRZ5b/lZfzIA2mRaIbs3WNSoNSd0A3shxD6:nMRZ5b/lZfzUsb2WNXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2