Extracted

• • Target

    b45914f6c3945f7f2d4a8e93aaec3f9e36ae769af7f8a570a3e205cdba1f1f8cN

  • Size

    264KB

  • MD5

    4a2f0881c5eb5ef38b97dd86267664c0

  • SHA1

    b087f1d766b02a9e6d98d1a8c95292d3b73dfbb1

  • SHA256

    b45914f6c3945f7f2d4a8e93aaec3f9e36ae769af7f8a570a3e205cdba1f1f8c

  • SHA512

    67350b8b5176137a597a6219df14e6e84f2fd19a83fe396fb4934d13f67feafb89f9d57ef98652567692e3224c80ab0bfb1b1d7d55f1a3d8ecff1c49d7c839b5

  • SSDEEP

    3072:cd9qUrENbh2724ho1mtye3lFDrFDHZtObmOm3AIpwbjshrmP24ho1mtye3lFDrFA:SENcwsFj5t13LJhrmMsFj5tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2