Extracted

• • Target

    2715f9a24e2c5d0d78700db19ad0adaec79813fb604c440b74067e8e4b31d5afN

  • Size

    72KB

  • MD5

    8cc79c63c6b2e78a32f54a6188d12180

  • SHA1

    6e2cbf3e02cbdba937af343731edca46f3815ace

  • SHA256

    2715f9a24e2c5d0d78700db19ad0adaec79813fb604c440b74067e8e4b31d5af

  • SHA512

    5baa70a7a02e23ff3bd475f9b524eedfe9d33f5066761e0ee35214dad21146ea6594bd3f10268c8bad3015f5e745bd93f96e95c00027459728d7a3cb7e81a020

  • SSDEEP

    1536:uOlhr4o4GgZJz6nsK3cilPPgUN3QivEtA:Bl9N4GkV5yNPPgU5QJA

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2