Extracted

• • Target

    221ad0612bb4202e491c926ebb7ed8bcba544bfc58757fd2344ccfcfddec2d0a

  • Size

    335KB

  • MD5

    a3e29ef252134eacc6c17f5e1e7fd85c

  • SHA1

    521e26ecaa57d97d44bd11fa0623467c55da1a54

  • SHA256

    221ad0612bb4202e491c926ebb7ed8bcba544bfc58757fd2344ccfcfddec2d0a

  • SHA512

    6a1dd722bc0a6dfb40e1c4b417009fd70dee6a850fd9966c83cddb8067dbabc74386272888325e593fbf5be642a66f6c4580f8907f216e366edc6be8ef90cb18

  • SSDEEP

    6144:FcJP58blTRzJvLvwU/4qwvwU/4qvvwevwU/4q+vwk/4qD:hl/

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2