Extracted

• • Target

    b6876772e39f351d93c3c214318996c4a3cda5c029f81cbc3642880dd0078a0f

  • Size

    55KB

  • MD5

    30256e0c96eaf79238a461be15287b76

  • SHA1

    cc6240e8e3cfe47a67d9b8b3b003e03c8e55164d

  • SHA256

    b6876772e39f351d93c3c214318996c4a3cda5c029f81cbc3642880dd0078a0f

  • SHA512

    804ab15d17882d51db9273f408e217b650a168061c90200bcb1ffc9e2eff274694eb81b8208326ea97d499013d55088db4f85dae7240c99ece32fe278e4c303b

  • SSDEEP

    1536:x/St75j7AM4V4xnKHMuvwlutDNSoNSd0A3shxD6:x/SFd7ABKDjutDNXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2