Extracted

• • Target

    f4dd5bf02ab0d6e6d458753bfefc18ab40faf5a7d9926613a9c76fd6f9cd7e13

  • Size

    108KB

  • MD5

    1df76b0d2238ebc5e0d859b68e9fc1c6

  • SHA1

    6a7c2596e8d263b0df839342179b18457da3bff9

  • SHA256

    f4dd5bf02ab0d6e6d458753bfefc18ab40faf5a7d9926613a9c76fd6f9cd7e13

  • SHA512

    3982eb331badc9b42c5c9e667847f6b9a4f0d13d5b3e58118ab31bae6db3095a8057189080221ab05fa0f2cccaabfebf8b6ea7bfeeaddbb3c27ddb173d8c3903

  • SSDEEP

    3072:ijYeLMt9mjSkFe74UjmOiBn3w8BdTj2h3K:ijYuMt4jSkM1jVu3w8BdTj2VK

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2