Extracted

• • Target

    3666e1349c6514f4b2fbcd604e6933f7b28db669d0273acf2f9c1c81834b40f5

  • Size

    92KB

  • MD5

    730cdef2e35714a4ebedb76e878cdc22

  • SHA1

    885a76c8dffa2a4219412db3ea3191e8d01bb43a

  • SHA256

    3666e1349c6514f4b2fbcd604e6933f7b28db669d0273acf2f9c1c81834b40f5

  • SHA512

    ea903d3e2666de9274778b9752c3b966399191b40d06e3c31257e51ac3201917f8a1635c48fee021aa5dcfc8bd8aab7a36d37c50e7d1d1a6bf7ebbfe17b2b200

  • SSDEEP

    1536:GzMOVg/8bqhp8BUFUNSV2dG+eo1xC0GZFXUmSC2e3lO:QS/5H8BU2024ho1mtye3lO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2