Extracted

• • Target

    4b0db724364bd2c757f80f659c4581fe6ce60ff03fdc869b32eba5e965e6ab8cN

  • Size

    59KB

  • MD5

    b7dcc7709b9f860516bb7b013f060280

  • SHA1

    185571c42d88d0ae5152df3f60bff76ab0501a21

  • SHA256

    4b0db724364bd2c757f80f659c4581fe6ce60ff03fdc869b32eba5e965e6ab8c

  • SHA512

    fa0f7f66c13a7631ed3ab81fba69c46990f3fb80269729c27effcbd64ea0e84f8cf9d5cf05aa845cb41dbce698240727289cf7aa983483e01627ea42821af2e5

  • SSDEEP

    768:lfdisR0FyQ4ufjfLpjKSyv9Qx33xYYY5MD9L64W5kpD9mQR49/Z/1H5L5nf1fZMa:zzR0wKL1DkQa5Mhm42kpck4VHNCyVso

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2