Extracted

• • Target

    2308f7c3bbc2d033be1baf05407cb675657fc7be617346a2b49ff23115ef2b7c

  • Size

    64KB

  • MD5

    99e29e0e64960cd2910be5171d9a09f1

  • SHA1

    0fb9df4dd28db03dc9fe7342575419c90ef1b115

  • SHA256

    2308f7c3bbc2d033be1baf05407cb675657fc7be617346a2b49ff23115ef2b7c

  • SHA512

    5d279f5e96174953baa39bb228f07bc3fe266519464865158bc698310ce4ca95be0583c39822f61e48e46f8829cf9ea6446fff5c364147bc86a29482f648ae80

  • SSDEEP

    1536:5D99PEpuL+5oIXMRt64fUXruCHcpzt/Idn:5p9PGmKMmUpFwn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2