Extracted

• • Target

    02f2c4b019cc8bb0af212d6baab9a430e4f2ffdcab175d8494a90b7b1e50af9a

  • Size

    67KB

  • MD5

    691ed345c59fc6e52dad1fd050c365db

  • SHA1

    b70851ec0b5c6306e510985aa25b771b96d5d33c

  • SHA256

    02f2c4b019cc8bb0af212d6baab9a430e4f2ffdcab175d8494a90b7b1e50af9a

  • SHA512

    e3938052d9aa74464574b64071d11258c7073aaa6dbc45e6e41a30d554b34d90070565a2198e65d333b05a451217d499583ef9e283eca40e1d886ccf024f251b

  • SSDEEP

    1536:a9am7nZDjIVOwKRDXky9Fx6sJifTduD4oTxwf:aYm7nZDj6HK3bx6sJibdMTxwf

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2