Extracted

• • Target

    93aa2f82294f862144b8e7f4a26a634d3e5bff21241d0dd5e50eb255c0ecf61d

  • Size

    55KB

  • MD5

    e62f26f89f57949da40d2251c53f9af1

  • SHA1

    a5969912ca870823c0d890a453a9dfae13e5698d

  • SHA256

    93aa2f82294f862144b8e7f4a26a634d3e5bff21241d0dd5e50eb255c0ecf61d

  • SHA512

    e344061efc68f66f4c25d81d406f178e372cbc40a1bac29df32d4dba29185186468b7784a021915e91ae48119f0ea126e80be15e84b41b950b61be756e1ccfbc

  • SSDEEP

    768:qPmEheY/1bM+1swb8L1vNH/Jh99kFq/7jxqldDnqeP/+/1H5cNSoNSd0A3shxDfB:qPmB39kFfdmeP/kGNSoNSd0A3shxD6u

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2