Extracted

• • Target

    ede59a9602790f20db06bed2aaf4603bfbdcc55117a0d124cbaa324eb940f40e

  • Size

    48KB

  • MD5

    dc417c0eda8a07daee5e447bb7988790

  • SHA1

    41030d097ae205fd5355ed21c26878aea2a52b4c

  • SHA256

    ede59a9602790f20db06bed2aaf4603bfbdcc55117a0d124cbaa324eb940f40e

  • SHA512

    4e11eede56a404ed8b43ebdc69d70d9c98331bef53090240f138a2db9fd128187fd547c8d011e2c993b607e03e93461ba82b7deb5eb9e062d3a7cd1973040556

  • SSDEEP

    768:LV1YF02ZU5rbtlqGs1Y6LPVgG6E8742oso6iQ4mq5SLUPXEx/1H5:LVy92tUGs1Y6LPmGU5nUfEr

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2