Extracted

• • Target

    1efcdd5663706919248051196284b299cef9894354defb70b978757f6b8490feN

  • Size

    219KB

  • MD5

    e0c7e84dab143119b8352396d7a53d00

  • SHA1

    9164ed9acd5da624aefdad9a11180a7b8f3786cf

  • SHA256

    1efcdd5663706919248051196284b299cef9894354defb70b978757f6b8490fe

  • SHA512

    ce252ee6325d351f47da721fa9695b8a35ff60c93d318058a67d689d5d33169638e30ac67480b52009d3e04e6a0eb310b39ab551ea09f72cf4c12ad5eb5d6a97

  • SSDEEP

    3072:nZftz3SnxGI5RYuLPdPzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:nZ9Cx3PNzDOO0aDD4PCxdXXwSfYrwB

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2