Extracted

• • Target

    5d3a5705e5fe001653d33d81c0fd89f4dc0839079802cc02057324584c369cb2

  • Size

    97KB

  • MD5

    c21aa83d174ccfd7b2021e9d503c4e6f

  • SHA1

    391b95caba57bf0131611237c39b44553079b49b

  • SHA256

    5d3a5705e5fe001653d33d81c0fd89f4dc0839079802cc02057324584c369cb2

  • SHA512

    5392a66825cc0a9300a5ea13120faeba7c4189dcd1445ba78dde11dd4c873e1466c79b4ed279d0d0f0bed659f8533445c4462907fcc0dd07cd21187aab447d5f

  • SSDEEP

    1536:Fy5ZM3pABEvco9XlvPQIwgW3kXUwXfzwE57pvJXeYZc:Gi3p8WXlvPCAPzwm7pJXeKc

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2