Extracted

• • Target

    fb1cafe05ab0534e9f0a4c5e0f0369202dbfba97ff790d64abad63097a6a3203

  • Size

    67KB

  • MD5

    ad172d11136b254f34e04ff6518b31be

  • SHA1

    306dcce418a535859bacd9543019afdc148b103e

  • SHA256

    fb1cafe05ab0534e9f0a4c5e0f0369202dbfba97ff790d64abad63097a6a3203

  • SHA512

    865ad9cdb82e9470b8e522da33fe2a2bdd22fefd6360c80fac750fcff82d76752aadbd63aefb1817caf1496e19c81eb0e60d97d1a73cb15b195e3e41bb8c628a

  • SSDEEP

    1536:xgbOEoXuOgYSvGMfSeadFsJifTduD4oTxw:QBBIeajsJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2