Extracted

• • Target

    33072e7e4029f749519f5003d03ddc8c699958ae8b6d71e36f6745f8d1fa07da

  • Size

    395KB

  • MD5

    f7b838eb6ed156861f78e28531a766e5

  • SHA1

    dd661aaf87cc40de09f70e8cffa14fa642ab4224

  • SHA256

    33072e7e4029f749519f5003d03ddc8c699958ae8b6d71e36f6745f8d1fa07da

  • SHA512

    b33396cae84bb4ef4d8eedc0ef306072f6d8e22b0e3b4357939fd5789c17f7cddfc047a2b874ede0d131d0ddf5f96ca0c9ab3bc3a37e1bdc97aa601f655b1c54

  • SSDEEP

    6144:Ya0Lr/is4y70u4HXs4yr0u490u4Ds4yvW8lM:5wV4O0dHc4i0d90dA4X

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2