Extracted

• • Target

    02c9a2f7fe3075cbfe1b75cde0616e48dd22d2e8202d47a421e7bc181d84383f

  • Size

    318KB

  • MD5

    21227c73ad803ac1212180c67977cfd9

  • SHA1

    4d7b692ba135d02dfc4423d369fd0ac052c8ba6d

  • SHA256

    02c9a2f7fe3075cbfe1b75cde0616e48dd22d2e8202d47a421e7bc181d84383f

  • SHA512

    cc9b4fcc9270ba365daa6d9d110d9d5fe2fcfc50b1084a1fb7398fc0cd1a77e72c260184c6ba7a533118bad62d04021edf2b4035701bf2769eb6bfe4359a4cee

  • SSDEEP

    6144:ycxE47RVEQHdMcm4FmowdHoS7c5cm4FmowdHoSrNF9xRVEQHd4:ycpO4wFHoS04wFHoSrZx8

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2