Extracted

• • Target

    fb6d3f04c09ef5a89bc9e6746cff31d068b71647b77868dc3ca7d9af58b980e2

  • Size

    97KB

  • MD5

    b8ff42bdab194046f82bd301d055f4db

  • SHA1

    36c5711da5e53207a2436b62c706f71e5f1e8d04

  • SHA256

    fb6d3f04c09ef5a89bc9e6746cff31d068b71647b77868dc3ca7d9af58b980e2

  • SHA512

    cdb23904534520bfd1cb67773ea6a9571a4a70bf63f3c4328d7231c615f77b2ef68641794a99ce6030be42c7552251e4f1a9bd9c98917f8f75635d5aa8636291

  • SSDEEP

    1536:TSt3gUCIDObxPy2p3pPloUuXVsiHn1U2Bf09oVXUwXfzwE57pvJXeYZc:TSt3gUCxx62Nu1h09oxPzwm7pJXeKc

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2