Extracted

• • Target

    2cd86ca35891f26d7791366ffab5a41cfd8d82e031f6e80aaac356f33b6d5e69

  • Size

    101KB

  • MD5

    d6381f4287f77342ea41dd157c5deb27

  • SHA1

    9acafde301a8c83cd20d1c0571e9230194f75aaf

  • SHA256

    2cd86ca35891f26d7791366ffab5a41cfd8d82e031f6e80aaac356f33b6d5e69

  • SHA512

    ef01ca622eabdd0eb8a2be4c47be24b2c2fd5f8183bcd44334b1f74a845399fe7bf952d289f63ce35c1cc428d9479a7d5e19a3c21f630d144220b6be9698c5b3

  • SSDEEP

    3072:oM3XpgdQ4ZUduXqbyu0sY7q5AnrHY4vDX:9OT853Anr44vDX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2