Extracted

• • Target

    9b87b66e0f26c8b308c5bce904b022e5a8ad5c0016f329b65d49f95a3f4122caN

  • Size

    128KB

  • MD5

    f4ce4bffacd1ac6b7136c2181d71a5a0

  • SHA1

    4b8b228523ac0a26b89449c975bacac557682241

  • SHA256

    9b87b66e0f26c8b308c5bce904b022e5a8ad5c0016f329b65d49f95a3f4122ca

  • SHA512

    24505721c0e79adbab7b5ab2b5153d45da4405fd2ff7dc9745a13e1a037d1585ccd9de7bef34bd9cc5e4cd18f4d906212bf66656432440c0e800281f251cc338

  • SSDEEP

    1536:D3n4mt9A9YBDxrtcZdbbFS0bD/j60Yzm+QjILQ9FKGXllUDtM60TD4ruhiZlrQIc:D3n4mt936rDmatKG7UDd0pCrQIFdFtLQ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2