Extracted

• • Target

    e63501f8e5eb10b959f307c2be551be3bd0b17b4de2a618cf3242d9f9aca8c75

  • Size

    97KB

  • MD5

    827da2d9ba8c379f2e01158a27b1193d

  • SHA1

    81f99f153185d7bfb5e19e960a69a0343a03716c

  • SHA256

    e63501f8e5eb10b959f307c2be551be3bd0b17b4de2a618cf3242d9f9aca8c75

  • SHA512

    7cc9d26728146c4f707607aa1932485a270822e39a334332154c40b2834d50b686485c28e02507406c782084060e1999d0fb28aa113baa78f65716ee3b91bf69

  • SSDEEP

    3072:2iQa4aoJQ/EHyCDXdxVIRV5fPzwm7pJXeK6:2iQayCHW3VIRV5Hz/7zeX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2