Extracted

• • Target

    440c2fffb8541d73e8e63a761f63593d3f26918c8f367a1fad535efb79d1a15b

  • Size

    52KB

  • MD5

    80b21bca07db3b9cdbbfc627b2c7336b

  • SHA1

    c2782e362250e318275a25ab999238fa6b0706a7

  • SHA256

    440c2fffb8541d73e8e63a761f63593d3f26918c8f367a1fad535efb79d1a15b

  • SHA512

    457cab788ee677927a132a73cc41f6ec6f6171641c1717f1fb9c3f45b077d63a4075631edc59738cc95283458ea054587649125e7754ab98981acc7388c0e0ba

  • SSDEEP

    768:isHexXf3dcamuW9z50nIsukPP23HOooXfEJd3fM+hvV8iK8+/1H5F/sEMABvKWe:VE3uDuW5vZkPQuooSU+lS8ktMAdKZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2