Extracted

• • Target

    fdc47d5a7da2d40754ca603b63917fa7b18b91b0f0f72f70b279e0b03c531678

  • Size

    91KB

  • MD5

    f9f3a90eb57e05ab8c5a64fca7050ae2

  • SHA1

    826fd697525af7d3c8d22186681d01caa9525306

  • SHA256

    fdc47d5a7da2d40754ca603b63917fa7b18b91b0f0f72f70b279e0b03c531678

  • SHA512

    8259600e01828d002db240689cae7b35b5b2123967992e4fb263a68a8bb0483329e3d87ffb0f7c6c8becff131b3afa3e731b5b3b0a06889195b6764e3e4d739f

  • SSDEEP

    1536:jpU4eQ6DB9RvJkh6Gov1SC3/DarKuSTh4ObU0wkbc1:+4ef7RQFkcY/DarKuSTH40m

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2