Extracted

• • Target

    11399d36106bb873be0b0942ab0d72753b62863e872b0ed980770758a7389df3

  • Size

    395KB

  • MD5

    df3dda99fb3e801c409f0262cd6c5b4d

  • SHA1

    73eb48a2f8d80f99de2a50366c8ab75fa6cb64da

  • SHA256

    11399d36106bb873be0b0942ab0d72753b62863e872b0ed980770758a7389df3

  • SHA512

    485c27aaa393fd40b02f73864c9b1a55c4179eab8d171ba4b76b6e2575e64dd28039edf3e69d60eeddfc0135f5f6ce26ebaa52339411e4913cb7e2e2a367b525

  • SSDEEP

    6144:qQ/Vs4y70u4HXs4yr0u490u4Ds4yvW8lM:qJ4O0dHc4i0d90dA4f

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2