Extracted

• • Target

    d1c0aa9dbe09ec4a59e14c92eb80e9168f9273b2099bca309aca326cf99ea1e6

  • Size

    97KB

  • MD5

    c6ae604df91f4de95b9402af2cb8cca3

  • SHA1

    99ca28fee0918dc14683e4d0b078cf101f84a352

  • SHA256

    d1c0aa9dbe09ec4a59e14c92eb80e9168f9273b2099bca309aca326cf99ea1e6

  • SHA512

    a640629f990feb57596120ee6582ecf4bf75400069343b4623f01efe8e37894013918dd08554470830fb35a5a7b939b63d98579b843a4e2993e719889ebf2720

  • SSDEEP

    1536:5jYl55TYcem7FHl+5fabwXUwXfzwE57pvJXeYZO:M5TYc5FF7bUPzwm7pJXeKO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2