Extracted

• • Target

    b3ed4c1cc8abfb7ce4347010bef24980e46efc32db897ed0be2b1026d900fde2

  • Size

    64KB

  • MD5

    66034fe65368ff7ef228799e93a98567

  • SHA1

    4044b23f48eeeff01f978407a3982ed69335c978

  • SHA256

    b3ed4c1cc8abfb7ce4347010bef24980e46efc32db897ed0be2b1026d900fde2

  • SHA512

    d2dd6df735621c11b7a7121ecaf7beacf70964e49e59f46e9ce921d889909104406e1c2277cf87eb0959a7ca5474128b0fd89b484b38a99a1f6f564f7e071fe4

  • SSDEEP

    768:TRkhLa1wwSNPrUZsuz/1B61/ITUU38xCq44QJ9/1H54FYJKA2kms8Y/ts/9d2Nz6:T4a+H3/KU/xylWyJrPFW2iwTbWv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2