Extracted

• • Target

    865534e66ac1d93f0b340fefedcb411cd51114fd6416e34da961e386df976a30N

  • Size

    55KB

  • MD5

    d090987b035e0af4348870987b2d3400

  • SHA1

    817d01591f1dc3f7fabc1f9de98d9b606ad7764a

  • SHA256

    865534e66ac1d93f0b340fefedcb411cd51114fd6416e34da961e386df976a30

  • SHA512

    e9562c1497f8cb1d67c065520d1f8bc04e45d5e6f954e4eb4b7486f9a24c69a3b1106ba4e981f8a497f830f3529313aee71d944f37987ea5a3b5c589fa892080

  • SSDEEP

    1536:kWtq1Hd57+n0FZkoc/NSoNSd0A3shxD6:kFHT7k0F6oUNXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2