Extracted

• • Target

    597acf3ead4ba649484c8823f124dd2f17c4eaf1c887d7348dceb72f48591ad4

  • Size

    1.2MB

  • MD5

    ed95483958ad1aa9652adbea9103e65d

  • SHA1

    9b603c1747d1a0d2a8c033c42cec871a915d3baf

  • SHA256

    597acf3ead4ba649484c8823f124dd2f17c4eaf1c887d7348dceb72f48591ad4

  • SHA512

    380f04d23e9fa602b4f3a75348347846995d1ed05cd7c0bb819f16638a5c175a59f8539e0f7935b869f503aab63b417c9bb363fc1e881b1c83fd646b555c9fa9

  • SSDEEP

    6144:Sz7BlM13ye/IcYvC8vA+XTv7FYUwMOFusQ+kJ3StWDKcGVol:eV8FYvNA+XTvZHWuEo3oW2to

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2