Extracted

• • Target

    47cc34c768695f6003a803b900ec1e4897fcb79673698a326b32360d03694087

  • Size

    45KB

  • MD5

    0e85ea7e71dd367ac5706b7691638181

  • SHA1

    1ae570dfc0938b4570993c3650c3440ba67d0c8a

  • SHA256

    47cc34c768695f6003a803b900ec1e4897fcb79673698a326b32360d03694087

  • SHA512

    175f1da4f3fb0ad0959b7a0d5fadcbc45c3800a4f4970452d9e7c36d383a9037609a5f1abd720e834f99530cb51d4bda82a2fd6b3b6044b2ccf5faa5180c233a

  • SSDEEP

    768:hsDL+IvX9gX/nbc5v5ywkEy3C5gFhXKAFP+omC5AJoRDZmBE0a/1H57:c+ENeA7yJ3C5OhFmeAJoRDZmBEn1

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2