Extracted

• • Target

    ccd8cb590d16f8a02fc8b48386427a737590391ab6aee17736bd6e0c806ddc28

  • Size

    250KB

  • MD5

    f2c3602051ef7fb33bb58622456debde

  • SHA1

    4c801acc5422f929a38ba86463fc31ad4bea9985

  • SHA256

    ccd8cb590d16f8a02fc8b48386427a737590391ab6aee17736bd6e0c806ddc28

  • SHA512

    afcdad7d67194516534bd49f413cbdfc4f326dd63193b2d091f2bc8bef8524520bcb1964f145b264099493ba4b4dbf0d49ba77fa9a5d3a9d495d62f14ec41994

  • SSDEEP

    6144:jc4kvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:g+

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2