Extracted

• • Target

    5da3a2a068f99b2957591597986cec80218c6fba8311522b4f54e874707d80cdN

  • Size

    59KB

  • MD5

    03d0dc1a56a07bae6f2fa47993205810

  • SHA1

    31c55e2238cc8b96ebafab69d038e1ff9b3e536d

  • SHA256

    5da3a2a068f99b2957591597986cec80218c6fba8311522b4f54e874707d80cd

  • SHA512

    37df0fea5d85149891f1239d9e88203272ca0e955e6d65e48ea57ddf50952767dc130a0fe03b883e92c134b1680f52829af29e3983f8baf015fa8cd099d76ffd

  • SSDEEP

    768:tX/LBkmlGNuqzBpnT0jg+Zl4XRPSGvNS3yoOpb0ibSZ/1H525nf1fZMEBFELvkVB:tjBkTuqz3T0jgel4BPNNSzOZQ4NCyVso

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2