Extracted

• • Target

    dfa3e98c78236ac07867bed447247a490f3b7798ab93d1b3ac22804958ab1583

  • Size

    182KB

  • MD5

    a59872730dd74479363728c9a06fe8b3

  • SHA1

    b665da0ff020d28f86e33fde7922ecbbd3abc7ca

  • SHA256

    dfa3e98c78236ac07867bed447247a490f3b7798ab93d1b3ac22804958ab1583

  • SHA512

    1079fa3dee1acf68cbb000e99a44ebe32055dca9b37d8116026ee1f9b01bc5a06a69d26bd80adf22cf53b5e6a81b4d15b03f497114a762d84007861adaa3f3ec

  • SSDEEP

    3072:8FI5cL2XSelLBsLnVUUHyNwtN4/nEBlMdQ2A3V0ANtLZMMMblLBsLnVUUHyNwtNZ:865cqCPUUHyN4lMdQJV0Aji2UUHyN4lX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2