Extracted

• • Target

    df2731b03a70f1c7f3563e5a24928ec0ea955f648d49b5a1cae7532b5ad56b59

  • Size

    55KB

  • MD5

    3af4d6e6306b415a4edeb6de1630d416

  • SHA1

    9beb3dd3fc267c54975946f9b921c56f9a264f15

  • SHA256

    df2731b03a70f1c7f3563e5a24928ec0ea955f648d49b5a1cae7532b5ad56b59

  • SHA512

    f794f291a94c0c9162d49b57fa215c91d669b47143b0d9b8940949bd91876014720cdcafe28420d4c04acc5bf5e1630e434a67655dce7830ca31dcf25b6cd254

  • SSDEEP

    1536:h7OojaIUKZb4kCLWGG+AZNe6zJnUyjNSoNSd0A3shxD6:hdJZ4YS2JnUyjNXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2