Extracted

• • Target

    d903213fca27ff97c2f27cbe233f177410489153953e3eaa99e5e0422d641391

  • Size

    84KB

  • MD5

    d0dd3696d1eab95d2f3ec9d12f58ba16

  • SHA1

    a2943c4c77d8c869c73e92889ade46123ad99412

  • SHA256

    d903213fca27ff97c2f27cbe233f177410489153953e3eaa99e5e0422d641391

  • SHA512

    555c051dddfbf21db4155a1fbda96a57d1c3dd11c393c0ab1304765f5a8dfdbba9b4f73808e57e2770d96877918835f2c955e0f7c6fd57f9a768268724a81b36

  • SSDEEP

    1536:X/6nZ6fMLsPI+kpzeb9qRNDrlOmXSREXHfVPfMVwNKT1iqWUPGc4T7VLn:X/Yh2UNDrYmCREXdXNKT1ntPG9pT

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2