Extracted

• • Target

    7532190e8123ca44ebbb531b0b88a3de463952be78341916d5112b320c3766e8

  • Size

    800KB

  • MD5

    1cc6d536d25900d67342e75cce686db7

  • SHA1

    06ace8f3459cb807766274f8617ebb692e9d4084

  • SHA256

    7532190e8123ca44ebbb531b0b88a3de463952be78341916d5112b320c3766e8

  • SHA512

    19cf273961515a3f2b5323fc9f74c4a78e2d7978166ff45d8db838c9c61b3b55147fa2492b7c43ee0c3dfd45ce375c45013b198c887d5ae7dea5b551bbba615b

  • SSDEEP

    12288:l0jD8/+zrWAI5KFum/nim/+zrWAI5KFHTP7rXFr/+zrWAI5KFum/+zrWAIAqJ:GjD8m0Bmvimm0MTP7hm0BmmvK

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2