Extracted

• • Target

    TrojanDownloader.Win32.Berbew.pz-1f708735c2d5a34cf41775e88ce40168734878ee49cff5b0dccf6c008b7c0b42N

  • Size

    101KB

  • MD5

    8bd3f7b8c78c8dd85008916594963a20

  • SHA1

    dd2817282310f9dd2b3882d0d220ecf5baef4be2

  • SHA256

    1f708735c2d5a34cf41775e88ce40168734878ee49cff5b0dccf6c008b7c0b42

  • SHA512

    d4c11d9081188bcf7d8468efd0fd80fa99f5c93c9375811f376fa563dd6f344a07669cec512e5a5b776eab27c433a7c43d07d91a003b56cbc23105f530a3530a

  • SSDEEP

    3072:4FG2tYZ1CzyPA+U1duXqbyu0sY7q5AnrHY4vDX:4wzjUy853Anr44vDX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2