Extracted

• • Target

    b550ec1b5072820ba37cb382a842587e51a42042243afb365a671a2d6510a721N

  • Size

    364KB

  • MD5

    a4bda7800d7fcbdf50c02e195845e9a0

  • SHA1

    2ef7e58b332fd8689ab0372ec096eb745d7474a1

  • SHA256

    b550ec1b5072820ba37cb382a842587e51a42042243afb365a671a2d6510a721

  • SHA512

    069949185c89d5b3b6c2d55bea2a25fff806d063e3067b799d25a82c855b450392dbc99f5365a8bffb47579658fba0035580a6a02e8ee82a6a297a760e3e9a4d

  • SSDEEP

    3072:PcLvHfXyOQl24ho1mtye3lFDrFDHZtOga24ho1mtye3lfTl0vFXo+RoaFcyjBRkp:Psfi/qsFj5tT3sF70/HwnrsFj5tT3sF

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2