Extracted

• • Target

    d808ce7751bea1304d476c6a68037adb28ce82f3f0251c0fedd16b1dee1dbf6f

  • Size

    92KB

  • MD5

    798124073d0c8ae270dd15a92baf2e50

  • SHA1

    65558fef664995d6127e6bca88f6f6fcc75824f6

  • SHA256

    d808ce7751bea1304d476c6a68037adb28ce82f3f0251c0fedd16b1dee1dbf6f

  • SHA512

    a921e99a39e4022fabf410e45b4119d5bd1d92eb2fba5e5c21ef65c9f356f61559f4911bb5007333e518063c4cbdc87d8b20884d0447a5b00df7cbbc5222e718

  • SSDEEP

    1536:i8K/kw6d8JM4lFplblzFw/wr2dG+eo1xC0GZFXUmSC2e3lO:i8kkXWptw/wr24ho1mtye3lO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2