Extracted

• • Target

    18d63cd2798db92776386dcffe37c5ff1b4e222e8d929c210da94581da2d2a0f

  • Size

    250KB

  • MD5

    8b8c6309d211814c0ff603cc157dc798

  • SHA1

    2b8e2442294cedbc583ea94525db40062028f3b1

  • SHA256

    18d63cd2798db92776386dcffe37c5ff1b4e222e8d929c210da94581da2d2a0f

  • SHA512

    679265d396fb3316f7fa4425fff0a739b1b556adc98798fd3bb1d9b166ecf4aede5ba757664ac2a7e06f360b2c750472d29539f1fd5f78f0ebb829304955deb5

  • SSDEEP

    6144:/SvcyDvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:/Iy

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2