Extracted

• • Target

    1d662427411f9cb2ff493e46e897ef10f5e1f6cb7655f30cdd7efbfa447d2d21N

  • Size

    327KB

  • MD5

    7536e25d98d0a9ca17e3dae1fb395f40

  • SHA1

    3e4a95705b0ca3e614b6c6240af7429a74b00596

  • SHA256

    1d662427411f9cb2ff493e46e897ef10f5e1f6cb7655f30cdd7efbfa447d2d21

  • SHA512

    a5e6f4cbc80c76ff6fb72f7d140b9ec7a5e351a3a6cf099302bf7eb57703cca623d07b4b2ac4f3afe3f1852d8b06f6bf2cf73b6046045bffb9d0f3751ffa5fdb

  • SSDEEP

    3072:K+/rOloeivFzcxX8BqG/CEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEESLjb5m0t4ri:K+DKVivFzcto/hj0+r+Mds9BY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2