Extracted

• • Target

    6c84803c1ab61978cadbcc7396206598e16feb8edcfc2b08fad4822980a0b65f

  • Size

    64KB

  • MD5

    e307abc3cda79e51a9e53d1ec4c277b3

  • SHA1

    f15e1ee30b8bfb9ee25ad62a0b17ce4d1b0a7e6a

  • SHA256

    6c84803c1ab61978cadbcc7396206598e16feb8edcfc2b08fad4822980a0b65f

  • SHA512

    befbf032d429ec26b65e541de0a27ed89f2057e9e9e8c3e0e4a21fe607975e20cba74d8128d562fe28c820017e70cec117b69b3b3bbbd464af93a9022b58ebcc

  • SSDEEP

    1536:X4N9V0+u/Zbb4WJ7aT8OsznfwxiuXUwXfzwd:XVxoW1alsznYcqPzwd

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2