Extracted

• • Target

    97e068059462e9c88fd217610ae8419a6938dbc8028c61e5adf2358df7616da5N

  • Size

    64KB

  • MD5

    c948a529e58f8ed05d81ff9243a3ea90

  • SHA1

    1425737f2a437d9739ceff4dceec8b10c041b4f9

  • SHA256

    97e068059462e9c88fd217610ae8419a6938dbc8028c61e5adf2358df7616da5

  • SHA512

    9e4d4066f01aff7422312651dd0cfccc103b7dddcc7f7d2ef1ad9a504ae3f45321b25b04548bf988cbc25225c3fab6bf28cf3c3829eac2093cc7756b4f16c89c

  • SSDEEP

    768:cVGNKmHkaDnS/cjxeHVxVPA6nuLXq0mPiperw3Y/1H5uH6XJ1IwEGp9ThfzyYsHv:y4KmEaDnyBAlXquzOFXUwXfzwv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2