Extracted

• • Target

    0777f664d3bb0b1e08022e2b8eca2e074544c279ae439dcf6a0db33e0141596aN

  • Size

    69KB

  • MD5

    7ba0ece0840f49dc735554f8a79e1180

  • SHA1

    c5796a2e9ffacc4e302e243e90429dc468f0b66a

  • SHA256

    0777f664d3bb0b1e08022e2b8eca2e074544c279ae439dcf6a0db33e0141596a

  • SHA512

    aa3f9a96a4e6d58be574782a95dd78507e16d037432c9f2775f77cc6f3779ddbd7b8a1e86880d0b74b797e9e9a73357f44b63c8155701aacb30ede89dd0d8d27

  • SSDEEP

    1536:ABaNOPDc9dntFhzgJSzxjS/f66OJNein/GFZCeDAyN:SjDc9dnm4zmfeJNFn/GFZC1yN

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2