Extracted

• • Target

    e96aaf916a525158ec1d33141c3c138efa1cd21a4b1821b8b5fab42681e02f17N

  • Size

    397KB

  • MD5

    dd109acf062351007336d2ff5173d960

  • SHA1

    f2991dbea0e6e7ff0e272bb8f54f971365e0dafe

  • SHA256

    e96aaf916a525158ec1d33141c3c138efa1cd21a4b1821b8b5fab42681e02f17

  • SHA512

    ca42a64b4838c36600b0f2ffdae57e731fa8be58cce2e8a95d50ae3285bc8680c0586e6eb1d0ef927a4b684db4bf13406177d5be0a5eba01245bb6e88222a386

  • SSDEEP

    6144:rVFahK2hJaPFM6234lKm3mo8Yvi4KsLTFM6234lKm3pT11Tgkz1581hW:/WAFB24lwR45FB24lzx1skz15L

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2