Extracted

• • Target

    8de795e9cb7bb0480c40e3b1f57d4395c9d0b45fe8b2d26d36c53e3db1546c95

  • Size

    96KB

  • MD5

    fe0438d1b91bbb0a2fefa069d8157d53

  • SHA1

    be6a2ef867b878e7fce0817ff77c9034310050d7

  • SHA256

    8de795e9cb7bb0480c40e3b1f57d4395c9d0b45fe8b2d26d36c53e3db1546c95

  • SHA512

    782f7070c0a15d7cf1cfe18d3af88633ea36ec844844302357bf292a9e8a2b2086f184d2f8fc7e6811dcc9d1175e0581262cfa8c788a5fffceab95b633fcc6d0

  • SSDEEP

    1536:8qdgd1QqqvDQNQD9RSgm8S4nLbwnYYYYYYYYYYYYYYAYYYYYYZjYYYYYYx88N3xf:891QqqvGQD9LY4H8+x+K4d69jc0v

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2