Extracted

• • Target

    de6281a868412c031550b2850c52a6b22b841da7dedd68fbedb30024a30d5093

  • Size

    52KB

  • MD5

    39d5ff85498f5f89c05693ee34518f45

  • SHA1

    1c2cc3d70c0ac1b86c4aba12daa58a6be1e35714

  • SHA256

    de6281a868412c031550b2850c52a6b22b841da7dedd68fbedb30024a30d5093

  • SHA512

    a83a3ff407b5ebfd39d192dff756b61b68bd84b5e2d6e4b0532eba8b94dc96c9a1b457e75b125fe2a1159a069a2ebfb3ae01fb39c4848774f3b204db305c0055

  • SSDEEP

    1536:7y9OhFMhbUQJy1O6ujGDMmjW4xuJQMvRKMAdKZ:7huxyDDljTSvUMRZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2