Extracted

• • Target

    bfe27977e11d5596a241874e71a640e05862bdd22af37e6c3c3ef3317bbb4b57N

  • Size

    264KB

  • MD5

    49b25c825e6bd07c97f1744d95c96350

  • SHA1

    16b22de156a43bed999567befe402c25b6eb90ab

  • SHA256

    bfe27977e11d5596a241874e71a640e05862bdd22af37e6c3c3ef3317bbb4b57

  • SHA512

    4bb7251be8fa9f551d078bf267161f24f9310dc331cd9f1628082b1633c5c706fe61c3de49cf5a7914d3c501c4632b0be0a2dd04704eb0db5bf35e34958be8aa

  • SSDEEP

    3072:4soKxcg2LoK24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtye3lFDrO:boCcgsonsFj5tPNki9HZd1sFj5tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2