Extracted

• • Target

    76f7341dc693985b280bfb16d40b132a2fdb60f4ad653c15400fea1f47932fcb

  • Size

    113KB

  • MD5

    a0cc161af91b1c4f1848a041990be7eb

  • SHA1

    72dcbcd659e9d2b9aa44d8d8e7436003407b3edb

  • SHA256

    76f7341dc693985b280bfb16d40b132a2fdb60f4ad653c15400fea1f47932fcb

  • SHA512

    7457da7533f1c4900afcc3a30acd0db5259dffd93b32a1a965929a54fb98aeb392e95f984dc64e6d29458680989387fb425da9c53bc4d79808e8a02084e496ce

  • SSDEEP

    1536:RdhEOWpWFDJw0yOO617DWkZFfScD7SzCbHWrAW8wTWiliX:RHEhaDLlOuGkZFfFSebHWrH8wTW0

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2