Extracted

• • Target

    3c281177a58bb4175576b3eeffa5068306c7130fbfd03942e4fae60b940d8144

  • Size

    45KB

  • MD5

    575706c36fcf0e2e2b1ddeb5987d4d4b

  • SHA1

    834aaa39f8633f3999c02a878d072c43216cce3a

  • SHA256

    3c281177a58bb4175576b3eeffa5068306c7130fbfd03942e4fae60b940d8144

  • SHA512

    6709a5b4d4abc6b9defd36a506b5407923dc2780778b77fcf423001bcd17ce930286fe694d6d5f2b858e7059c6f9dfcdc32ff56fa0df56839895a46f798b2514

  • SSDEEP

    768:jGeJHQJWcuBwgrb6iRbbLyUIp3eU7ImcFviky7PrnkY8/1H5o0l:jGeDcu+gr/rCp3XE3aky7Prnkf5l

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2