Extracted

• • Target

    4a8f48e36ee37bb64ccb25cdb93412c4904df0bf07989adad5c44e5b6db4d6c9.exe

  • Size

    194KB

  • MD5

    307c6039686d308b8bed7ae951600ead

  • SHA1

    3a848a1e56ec5a2d7ba5b43b8978ceffc02a220a

  • SHA256

    4a8f48e36ee37bb64ccb25cdb93412c4904df0bf07989adad5c44e5b6db4d6c9

  • SHA512

    9909a8fe26be0eb7097ad0907d4ba29b39f673c85ff692c2e331425c5796ee28e2f61dd660749a2918b02992431093a5c2a04a0b9a70bfb442d4e36d5ba94c18

  • SSDEEP

    3072:UsC6MdI/eVcdSfUNRbCeR0pN03xWlJ7mlOD6pN03Q:UUKI8cdSfUNRbCeKpNYxWlJ7mkD6pNYQ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2