Extracted

• • Target

    a98056b35bf543c3a0c14d10bc125008f9f4df67da549c84af7e11c910986084

  • Size

    512KB

  • MD5

    d1c85149bb7fc8bbb26d0bcb234fb7aa

  • SHA1

    685301394c22027c1ed772219b4d69793d2d6c98

  • SHA256

    a98056b35bf543c3a0c14d10bc125008f9f4df67da549c84af7e11c910986084

  • SHA512

    999bfde4e635913d8fa0a1ce62279732c8e2e7c38d1bca6e9a00445266a2f4445e95ddcf38df8012eee53e1b5ae9518d19e5eed7028c86c798722b8884b0ebbb

  • SSDEEP

    6144:oH/XKYAbRcUZP8VU5tTO/ENURQPTlyl48pArv8kEVS1aHr:kX+bdUG5t1sI5yl48pArv8o4L

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2