Extracted

• • Target

    1e766f4fe180d63dfeaeb091475b2ab09faae8b1abc9b40e894699874490e006

  • Size

    219KB

  • MD5

    a32a928a42dee135f9cc10235b63537f

  • SHA1

    f391e81fcaec75a4e93364967a8fe64c91319827

  • SHA256

    1e766f4fe180d63dfeaeb091475b2ab09faae8b1abc9b40e894699874490e006

  • SHA512

    b8174e9f62c3dd45dae8073df7d9c0b1c7139c1e23ab533fa7a905c6801af24991a17682eaff44eed7230a258bffc77cf0ef8d6cf77210eb10a2e9a56210ec73

  • SSDEEP

    3072:qc9Z1oMNSlXWmcPzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:qc9bIlXW1zDOO0aDD4PCxdXXwSfYrwB

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2