Extracted

• • Target

    e0f2baa3102bfbbed90e6f525474d418280ad1e75112316be922e4acebe87887

  • Size

    91KB

  • MD5

    0ee55ea7312860462d90ee20e2f4dce0

  • SHA1

    4dd92dabe53437d0d452ef1b97d1ac264bb38f49

  • SHA256

    e0f2baa3102bfbbed90e6f525474d418280ad1e75112316be922e4acebe87887

  • SHA512

    b81da0e46c5dd73973f2d9ef9937f941b3734a0c5703aee255c2a8c7ab47c86d3b979e9ad4fcb246d4ace02c98ea67c03450f71b14ac4d46ef1cedf4652bccf6

  • SSDEEP

    1536:SwIDwL3HKBGxyMlvTjZsZNb4NLXbO/s0mjI1XNQ:SjULKYv5s8O/zlXNQ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2