Extracted

• • Target

    50de7a2a83013c5c9e7d66b6c6a2718baf332466dc4215a67f76601d561db8d5

  • Size

    428KB

  • MD5

    f20c128a1e2dfcafe77af3ac9e313927

  • SHA1

    d06abd53a50c02bf6db1d38af0f328da3b28af5a

  • SHA256

    50de7a2a83013c5c9e7d66b6c6a2718baf332466dc4215a67f76601d561db8d5

  • SHA512

    53d2222aaa6b77d44cb554089e39b95d1e6b7de15bb59b7daaf3453c613cf6a120308a4110e47c078bea9c5aefdba7390534a747de5af4e9f1452db58b36fffe

  • SSDEEP

    6144:Ck6ABHn5ZXZuKVp1fNrNF5ZXZ7SEJtKa4sFj5tPNki9HZd1sFj5tw:CY5hjtFrNF5h0EJtws15tPWu5Ls15tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2