Extracted

• • Target

    69b59a48c9b38ca9efaf207500a4bed82b7eea3b9e5a389949b327ead8bf5f8b

  • Size

    84KB

  • MD5

    c4a68113709ed9ebe167773c1470f24a

  • SHA1

    0810ae3f979350f75b5a162a7b7add1c2c20dac0

  • SHA256

    69b59a48c9b38ca9efaf207500a4bed82b7eea3b9e5a389949b327ead8bf5f8b

  • SHA512

    056931a3995050e98108b3160069471bfd330a03ed931a30d6f25505902e476816030507c670acf353d387230141a99a86a64525f28859319e96ef8b20c6758c

  • SSDEEP

    1536:Dh5MvL2Lj4TYyafV44JiY8jNLpxwS1j8ANZLvfPDyH6n8dEelLYR7xeGSmUmmmmE:DvSq0pj3PDyH6n8djlLYR7xrH

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2