Extracted

• • Target

    e9e8b4526195470ed8d47677f4f404c8b3fda8547115a5419203d82a18a1b32b

  • Size

    512KB

  • MD5

    fc26fe5e0c353bc21b67fd6aa41525ba

  • SHA1

    c4d6c054d855d02ceb7faa99f4a930506b980fa0

  • SHA256

    e9e8b4526195470ed8d47677f4f404c8b3fda8547115a5419203d82a18a1b32b

  • SHA512

    4e69bb7b051c5683031615807ccc3be6d7ba89b575077da61c67b6be98b168e668e6c1e9a6d4bab6ed80aa99b28cc1397c1077a382ef682dddf640107d76f8a7

  • SSDEEP

    6144:pCldkq5UZP8VU5tTO/ENURQPTlyl48pArv8kEVS1aHr:EiUG5t1sI5yl48pArv8o4L

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2