Extracted

• • Target

    e1ca7481969e01fe72f89b1da89ee53a218d1e7477717b14f70b9c35c8c1a8d5

  • Size

    64KB

  • MD5

    00fd59eb04916a4f39dd2ed513d460f7

  • SHA1

    a7293d08c1330c058f8e1aeadac2c6f4208430e7

  • SHA256

    e1ca7481969e01fe72f89b1da89ee53a218d1e7477717b14f70b9c35c8c1a8d5

  • SHA512

    7fae24366d6e93e57c51354071cc9880b9875703ff3e7ba1b5ab88fa8690102670f6083bc85026226a7e06d99ec425c1f89420dfea6e869b5e629519bba3855b

  • SSDEEP

    1536:rA2wahtm4Vr14MRXOx1sz1XjCxYpWyDCrPFW2iwTbWv:Nhtm4N14eXOx1el6YpXyFW2VTbWv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2