Extracted

• • Target

    170015eecab83123c1ed1063c9693654ecd102503c5b05ec3eb15ac1e9915195

  • Size

    1.1MB

  • MD5

    fecba1f6691519dc9fb47310e6fd35ab

  • SHA1

    798e454afe4c1aa63d9db650ab646ad6d828e53f

  • SHA256

    170015eecab83123c1ed1063c9693654ecd102503c5b05ec3eb15ac1e9915195

  • SHA512

    0464ae2125754b0d20e12765352acd13852aa8e865e8b79928e7b3484b565d85632124cdf056ebaca6dc706ce3a17af989c4e92fe291a473af5e69594b181a39

  • SSDEEP

    12288:QzdrrQg5Z/+zrWAIAqWim/+zrWAI5KFukEyDucEQX:4trQg5ZmvFimm0HkEyDucEQX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2