Extracted

• • Target

    e1200e5da9f3c836bc58a8df7fb7d5163b0744701f1721d962cf371a095f4275

  • Size

    91KB

  • MD5

    abcb78a2ef3fa7ed22c9c84f05ae8af3

  • SHA1

    028a6f1eff36595ae5e4d88d6c798331be246b9e

  • SHA256

    e1200e5da9f3c836bc58a8df7fb7d5163b0744701f1721d962cf371a095f4275

  • SHA512

    55ce0b47808bb735b814caa18bffe51fccf374e3552ab5cce4c003ca27bab4bc92e4c15b4c3448ab6828f7365130746d55b128d53e1c41c30c8451e7e52b620d

  • SSDEEP

    1536:wJq3L+2dWvacoBiziOTRlLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXd45J:wJ+S2dcoBiziOTRlLBsLnVUUHyNwtN4e

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2