Extracted

• • Target

    0324968db33766f02ee637eac2df4a511ed3a7cab2cd67a2bd24aab0168bb804

  • Size

    88KB

  • MD5

    9be3f2faf7d22139965890596caa5dfe

  • SHA1

    ccf2e1e5b8f9572ecbe91d26694719738e569047

  • SHA256

    0324968db33766f02ee637eac2df4a511ed3a7cab2cd67a2bd24aab0168bb804

  • SHA512

    0b10c43ae05451168abd1540f66547820a74ebaf962c43cf156197ad4f4f65da2a9a38327b46b77f8d1dbdd9a20deed32261f71029a785d383cbae536ac0189d

  • SSDEEP

    1536:1XCn36fSL9jFQRFz+qaATDfBF8WJaCHGxZAdwFL8QOVXtE1ukVd71rFZO7+90wi:C6f0jFQRFz+qaMcfxZXLi9EIIJ15ZO7X

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2