Extracted

• • Target

    7052d8acb5938817e4dc645a7a5705075668f1b76c442ec4441cc40b4a1e0313N

  • Size

    91KB

  • MD5

    31096f2a49150fb923d6e3e1695cf7d0

  • SHA1

    cbf58c9a1ba91b7209cd15efa138b7c122d2327f

  • SHA256

    7052d8acb5938817e4dc645a7a5705075668f1b76c442ec4441cc40b4a1e0313

  • SHA512

    55372c3b0256cd3273b5121a8642186224d3e5da41bc8127d088ed4e0f26a64279d6011d57f8a02c02f8bc908039a8e504b2f97dff3172c4121b50c74e43a8a3

  • SSDEEP

    1536:2MUyZABy0vWHVcwhhZ+8nMfDV+xlLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXS:2KAOZ+ZfsxlLBsLnVUUHyNwtN4/nEBlX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2