Extracted

• • Target

    44c403ac327d2eb82ea18573f9c621e2d07275a7c9baea92bcc955f4fddc4c95

  • Size

    64KB

  • MD5

    55562d0c204e6bd46e4c663a95277cb7

  • SHA1

    9fe7ee8c888ba8d26ec2e7f5d77a58c385137f9e

  • SHA256

    44c403ac327d2eb82ea18573f9c621e2d07275a7c9baea92bcc955f4fddc4c95

  • SHA512

    27ca8509252d8a7a78bcf078585e1bf74f01897973f214a7ff6ff362244815d8034d888eb30cfd757c100ab9784d24ed79500837f4c3722617d4e6bf977eeee6

  • SSDEEP

    1536:V6hl14vPoBPPoqDvPaapgu8XDIGWl6RVL6YXUwXfzwP:VugvKPPoqbPfiDQlO9FPzwP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2