Extracted

• • Target

    9684129969568ab07242820a7c98ee7edb946450423b393ce6311223d027e919

  • Size

    352KB

  • MD5

    e600a47f554078544367dbb421531b00

  • SHA1

    594e4f11a9ab3aeba4912da958c9c6b3702525b4

  • SHA256

    9684129969568ab07242820a7c98ee7edb946450423b393ce6311223d027e919

  • SHA512

    aa48c01951b8a363425894d59c78f6bbf8e6ffb4f2bbdda6fcbab6b8e7541139fbf1c4ba9999357ce81e543c1b01e3888723a52ef2c529ce1b8b4eaff4a7d55f

  • SSDEEP

    3072:q7/ZuIZGkalFyhREOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:q7/ZuOj54yjwHL/T7Gsyn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2