Extracted

• • Target

    152aa5e7e5d464bf55a2460b2e1eb6493bb6bb28e507720e8348986277431c96N

  • Size

    67KB

  • MD5

    a5f88b47631d0dfb4417da8afb1eb900

  • SHA1

    13fd8d565a04feb8401d7cf0222ee990d3fdee10

  • SHA256

    152aa5e7e5d464bf55a2460b2e1eb6493bb6bb28e507720e8348986277431c96

  • SHA512

    3debecf997fada5d9775ee7b089af79bf7d5d2b30c287f637d39c3c050096740944e42d6743bdc3e0d7fcf0dbb4c3d4aa508e5f922e2ac6f965accbdf3142474

  • SSDEEP

    1536:UWHJv8CgpqAtzzaNVS5iziho64Bf0sJifTduD4oTxw:JOCUNzaNVS5lKl0sJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2