Extracted

• • Target

    e984d2c523de81e2b27782ea79ad31850158df4e185c749a66d72a6858d69e5f

  • Size

    64KB

  • MD5

    44f8cf072605086035ea2a37e24f84d7

  • SHA1

    c3398705e97d89d335f1f055223aafbed6dea591

  • SHA256

    e984d2c523de81e2b27782ea79ad31850158df4e185c749a66d72a6858d69e5f

  • SHA512

    359f4811bd6834844df075533155cf411273a8b0864ec7304e3ca050bc48c4e0285815f75e9f7c386079a4b46008d6d9900d1ca8b8256e29a6629a68fe046b9c

  • SSDEEP

    1536:oo+3FJYgY7Nj5DRcybH4KZF8QMQIi/95yEhrqEXUwXfzwv:op6rl5yWWgPzwv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2