Extracted

• • Target

    81d63014d8c4cac11c4c3b606a2f515f5c7017a409dc08adc6886ff670fe03d9N

  • Size

    72KB

  • MD5

    033691d1ff434ba654668b19237d2970

  • SHA1

    bfc991cf3e61c77767ad36480380ac9230d00b23

  • SHA256

    81d63014d8c4cac11c4c3b606a2f515f5c7017a409dc08adc6886ff670fe03d9

  • SHA512

    fe195ce3d47866542e8f9e1e4545840f4355c2fc606703a23b42f15347e61c80e936915c151b55c1f50cb9aac8bf3c0a33d6b550db960ef9e067661d5958da1c

  • SSDEEP

    768:cwmw9LrwJ3XzXK1Fz5HBAYRVL3Bk/w52k1VLf/+TeFPbPP///okZ3Ngk1RjNUAvE:cwmwMHkzp/toA2upOePbPP///TZ9Rb4

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2