Extracted

• • Target

    cc73e464e575e99904a080d745c559aba31c3c4456d1f6ba417e156a9f3b9362

  • Size

    52KB

  • MD5

    a7b8bfec8e568d83129b0e7222e25af5

  • SHA1

    cf3ed34efba17da456f702996f85f9cedb40ba7c

  • SHA256

    cc73e464e575e99904a080d745c559aba31c3c4456d1f6ba417e156a9f3b9362

  • SHA512

    eaf8aafe7e7e41f5081f3215d64f4cf41f5e259c214ecbb5ccaff7d264a448fac109fec3de51bdcc1bb46c0d312f824c4527933a7a7e718801e00a53e6fc671d

  • SSDEEP

    768:wGDWWgVQ8MeqG+K0etjBYjT7oG+Y7X5a56WHg7ztV/1H5F/sRMABvKWe:jDuIePketGjTAiacWHg7zhMMAdKZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2