Extracted

• • Target

    fe423fe6166df6d79b48fcdf207f2fb544926ebeb0be170323e2959940d448fd

  • Size

    237KB

  • MD5

    fffe8ce4d0b52ae9dd3ef1a63d1cfea5

  • SHA1

    67ca8d14cf4c977a1120d279e0d5980447c24679

  • SHA256

    fe423fe6166df6d79b48fcdf207f2fb544926ebeb0be170323e2959940d448fd

  • SHA512

    9bb821f84816334c7c0472baac37e5ab76d9bea65419a7a616452688a520e217cd271ad974ae2db5a73f1bd45ceb15d7366373d91beb988996a3960a710f54d4

  • SSDEEP

    3072:0on1K58Vbsggg+HIAUbj8Nq75Sq4iqnAUUjE02ZoL9snKKq:0G04bsggg+HIXj8U5ihYjEToZY8

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2