Extracted

• • Target

    c1619271a5fd30db339d660b95118fb96735f5327cae5912b02128e955cbf3f8

  • Size

    88KB

  • MD5

    563567bcb9e3f5dccfcc87f576684d07

  • SHA1

    24e3b8b71fbf0c9e3c118851f7c3fea548aedd22

  • SHA256

    c1619271a5fd30db339d660b95118fb96735f5327cae5912b02128e955cbf3f8

  • SHA512

    9a6d24af5de4a17b4f52b0fcf055d3676011a4b9a84736bd22555da710ec531e05602f38ffd36fc2d6f5d68a6700b79b727b4139a22c83bea190d1f6648f683d

  • SSDEEP

    1536:9s9VPLIkngULgAwF+ANsMPq0bhRiGkU9rtgbHn+++++++++++++++++++++++++P:6Puvrs4BTkU2Hn+++++++++++++++++v

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2