Extracted

• • Target

    a2941f33d4b5091f42e279b01af061bdee567de300e82d07ee493afda119c6aeN

  • Size

    91KB

  • MD5

    813bffa3c44dc072bda4a5af17946960

  • SHA1

    330a9541188a4db5bc2dc8bfa01279ea00b23cea

  • SHA256

    a2941f33d4b5091f42e279b01af061bdee567de300e82d07ee493afda119c6ae

  • SHA512

    29302f223110183003bcd2fb3a417c1413909de9836478d513206e5102a77c5b1a6f33955edb64ada8dfdc6cf34fac39336010cf662053057af7f4557d67c06b

  • SSDEEP

    1536:D6Or7Yovl+uQO+BJTWpnLyDXdi8pE4g5a3iZ8saqYko:2Y8ovkuQXvTW0DN3E4xSzWP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2