Extracted

• • Target

    602d221aa7e8085c632bb93136fa29e0be17d9c49df273e3649c09c4ec0297b9N

  • Size

    91KB

  • MD5

    ed66e2a491d208ee7d7756304dbe5ca0

  • SHA1

    7382e6fbbebc7c4b7fa43eb7d3016a7a363b9cdc

  • SHA256

    602d221aa7e8085c632bb93136fa29e0be17d9c49df273e3649c09c4ec0297b9

  • SHA512

    59c355830943216e5f9bc253243c5ab25485fad6adf1d0e4a862099f69a8c85310b94ffe14e7058ebef73cc10065a1fdb9c5b6b086e6dca53d50f42fbe8a9988

  • SSDEEP

    1536:zFAqLKKwjQan8Rzj17kb8b9psjx6DUYtbmQQfD:zFAxKwjQanizjpkZdoIb

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2