Extracted

• • Target

    76af2bdd68692406ee7205562123e111751d8dd34323c1e0d4ca18e3c1d3b3ac

  • Size

    64KB

  • MD5

    3196e53666e89985b175ff8bcbdcc051

  • SHA1

    9f5ca4c459e55161dac2386b58f782923abc15cd

  • SHA256

    76af2bdd68692406ee7205562123e111751d8dd34323c1e0d4ca18e3c1d3b3ac

  • SHA512

    a272bb105d310bfa75a1d342c5545a28ac49ea6746d862df58c614f43884a1253df4477493a96b99550be98f13d592d246106a22f5d52e4e31ece6f3f93a2f8f

  • SSDEEP

    1536:AEvTlcnR20XFGTXYCKPSJJ50vKZXUwXfzw3:AEvT4ImGX750vKdPzw3

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2