Extracted

• • Target

    5d25e3683033386b46bde997975e10c2dc76fdd313b111f57bcad6c750789422

  • Size

    69KB

  • MD5

    aa199dc318953336357f235dc13fa675

  • SHA1

    73f048639d5a047e45f6fc7f70f6611541db33a6

  • SHA256

    5d25e3683033386b46bde997975e10c2dc76fdd313b111f57bcad6c750789422

  • SHA512

    d02c9e13b762f92579f5b374e53aa4b64dd66d1e812bcda256ef69aa880f60c74697e8e50dc65093561b998951d39afde05f4e949f05b04ab0e4534ce5d47960

  • SSDEEP

    1536:ybM02W4qGKUtgudoEejjKamx6WPgUN3QivES:ybnUq5Lfqx6WPgU5Qu

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2