Extracted

• • Target

    3a089ff37176665f2354664e4c5cefad4b97b375fd73133aaadd519a38e55b96N

  • Size

    101KB

  • MD5

    16296f8c0140bc78bea2799d5631bc60

  • SHA1

    dccba9c783393edafb585ff614f71e9c5fa748b6

  • SHA256

    3a089ff37176665f2354664e4c5cefad4b97b375fd73133aaadd519a38e55b96

  • SHA512

    0db04a48d8daeee80f863731f2348ca774bbe79a3c8a46255bfa003e441679e6102c28bd2076a75b883fb1d905880f121552d6af35131a80bcf325d7ac294859

  • SSDEEP

    1536:LPYZrXvowt4q+8MgD/shzXtuXqbyNXrg0sZS7qlDABU8B9HYcJvDX:rYNFhUgQBduXqbyu0sY7q5AnrHY4vDX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2