Extracted

• • Target

    f2ff7326db316168f16352f980b5aece6c68dc8f783a8eb2929fcaa0d2d3c83e

  • Size

    768KB

  • MD5

    f95ed7fbaa993a8a71199b2fa42386e7

  • SHA1

    1ccfe5bb6e388dc9c1927814751781778347ec3d

  • SHA256

    f2ff7326db316168f16352f980b5aece6c68dc8f783a8eb2929fcaa0d2d3c83e

  • SHA512

    99fa6e1292899bccf43ce1bbcdcc297b8ce5a9c443b7c9580ede622b5f16fbd62cea12af9f7877c8c7bcd29a6914b8e5c9bf7f20f0dec85b66ee3e4497d2d353

  • SSDEEP

    12288:yblsjrXUnL/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KF4cr6VDsEqacjgqANXcoN:FXUnLm0BmmvFimm0Xcr6VDsEqacjgqAz

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2