Extracted

• • Target

    ee8501612644fb3fa50bfaf5f4ad0b5603739903088429d85943515f796c1c4c

  • Size

    97KB

  • MD5

    5b2e96a2fd012a20fd7d1d7434ceddf2

  • SHA1

    72ee379a81bafada1b9aca05ddc9cc6d828d94fd

  • SHA256

    ee8501612644fb3fa50bfaf5f4ad0b5603739903088429d85943515f796c1c4c

  • SHA512

    587886c28a214a715d0f18a1666d21e803fdcb05ecf4077264947861ced2817f75b2460411aa605626528d7e064ae4fc09dd07671d04f3bc495da4b707cc94ec

  • SSDEEP

    1536:VVbUxaa2pfGSSF8FrilVAchDkJ2uSXUwXfzwE57pvJXeYZc:pa2dExlC8QJUPzwm7pJXeKc

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2