Extracted

• • Target

    9cfc9970d6551bc0bf81fd7efa762d767a2d9d5e0776cd4d1d0d5174867596d5

  • Size

    55KB

  • MD5

    663a3f0a1abbd95b795fdd31042a5bc4

  • SHA1

    eef59fdae7634c77780b14b5616b73f087815ed9

  • SHA256

    9cfc9970d6551bc0bf81fd7efa762d767a2d9d5e0776cd4d1d0d5174867596d5

  • SHA512

    c81c047f5ecdd3cd112c1bf5ed0b2b0361c9c825d28f762e387fd0acdc5f1e7da0eacb2d8fc2b51f745c8acdb1bb7855934ac418acd38ec7ff9f7960b051680b

  • SSDEEP

    1536:wAiX6gjjUXY2Q3GhCymetuLyNSoNSd0A3shxD6:w4iiK3wwLyNXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2