Extracted

• • Target

    ded489ea62e8082b37a87e24ba9dc454b33435adc9ea28b5aca968d95c353d68

  • Size

    67KB

  • MD5

    385acb2ae9c186c97daf1b30cb4979a5

  • SHA1

    324936b5d470ffeb51c6c32f33b3e6a791bb7e31

  • SHA256

    ded489ea62e8082b37a87e24ba9dc454b33435adc9ea28b5aca968d95c353d68

  • SHA512

    e0add31fa9419f13693dba0cd80d0cfdcef48713903f5f0fd8ea4fda0631cb2ae0c3e04bcc1a7b99eae0210c714bb01a4aca2a1fa8bd70bed9b4306dbfdcd035

  • SSDEEP

    1536:ZnzgY6Ft9jZSxRGwSaJEUm5x5sJifTduD4oTxw:BkZjwPeTsJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2