Extracted

• • Target

    f152aaabe38a1e3b3b3d7140e2acb0029c1263c62380a7d19d0f3b819f8ffdb4

  • Size

    250KB

  • MD5

    93111187f21619150e650f445f63857f

  • SHA1

    31a0ae86b8967d37fd5b43eacab08da06b50e08c

  • SHA256

    f152aaabe38a1e3b3b3d7140e2acb0029c1263c62380a7d19d0f3b819f8ffdb4

  • SHA512

    de0409277e3a4f4c4f1f56b93d144f935540cc86ae59696f5f211dde0e8719cf26f32e06aa10345f1814e9ca793a4036347e588c4d2a5010c7f5c3c82377b577

  • SSDEEP

    6144:6LtT6BB+vCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:6LKV

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2