Extracted

• • Target

    358f671cc455e3d2fc0b95ce0529f88d8e5c9aaaa0ea8c6f6504fc4e8c35d2bf

  • Size

    89KB

  • MD5

    ff8c8321bc96cfe64939f16ae2e1716f

  • SHA1

    b04193c07e6413154c324ac9155c9c65762d748f

  • SHA256

    358f671cc455e3d2fc0b95ce0529f88d8e5c9aaaa0ea8c6f6504fc4e8c35d2bf

  • SHA512

    0bb5c648cbf15b997f1ffd27966680c27481c249585636e693dd4f721c4fd01f9dbd1d3ffe21298dddf1eb69c0f7b47a3b930b0456285b12af1b9be1104e3e80

  • SSDEEP

    1536:+wYyD58GY/pCq6+SY7fKfi+WrxwNistIcgyr5vbMAAEQ6gJCK/1GcClExkg8F:+wYQ1Y/V6+P7791otIcgyrVbMAgEcCl/

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2