Extracted

• • Target

    f2415df64d4b5b9b6216123310ecb0a3046ce7d1f37da6b5e70196f134b8b508N

  • Size

    52KB

  • MD5

    4119697538ceb18d384d536e9cf586a0

  • SHA1

    7cc29a9e77da41c85c02b7802e9a574fa923514b

  • SHA256

    f2415df64d4b5b9b6216123310ecb0a3046ce7d1f37da6b5e70196f134b8b508

  • SHA512

    f5b0ac0f8023615bac06d762fa1fd5c84bba2e5926e48cd5c55d86b1d52a70ba1f9f072b992dd8d42be49fe20bccce8abbfaa0ecd089eaba267d2eace27ed23f

  • SSDEEP

    768:bQhG4+vV6MBmANQ5lLCA+uLGzynN482JzZm/1H5F/sDMABvKWe:sEvVbBS5xCAXGQN92UyMAdKZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2