Extracted

• • Target

    15fcde0a496e5d9cdb31f1a297e4a21a4a085a517be8ea3a20c37dc5fd3ae091N

  • Size

    64KB

  • MD5

    06c1fefcbd3c2d33cee46e5ab49106d0

  • SHA1

    64722c94d0d33efa622f9d01bc88174238023744

  • SHA256

    15fcde0a496e5d9cdb31f1a297e4a21a4a085a517be8ea3a20c37dc5fd3ae091

  • SHA512

    746e74b669489dd82e0f09f57533105edd636d2bbb95c60314d04a04e58c7bfee084edf6564a89146cb8f67604c0ae9c0a31edd0b47716873cbbafe9c0ecef30

  • SSDEEP

    1536:zSbPS+lQO3nNCCqCCCCCCCCCCCCCCfCCCCCCCUCCCCCvmAWyTrPFW2iwTbW:adOu3mAX3FW2VTbW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2