Extracted

• • Target

    e0ceb94feef2582d94880e7b3fea8ba1fbb697ce3bd35bb01ef2e6b202545391N

  • Size

    113KB

  • MD5

    17369cb729419c00e881f1d30232ea10

  • SHA1

    12efc0e4c4615e69eaa13bd7c24e567d944641fa

  • SHA256

    e0ceb94feef2582d94880e7b3fea8ba1fbb697ce3bd35bb01ef2e6b202545391

  • SHA512

    f92482110e5568c7770ded6364c9ce075bb94dd9505431bdb7c0efee7caebe5387f1e13d92e30d4c28569653c2d74a014ce01903424d5c78cc5453cc56e59880

  • SSDEEP

    3072:5BKREJN/zp0YJNRNyhOuGkZFfFSebHWrH8wTW0:uw/zpWw7otSeWrP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2