Extracted

• • Target

    40a53943449d45c20adcf897ea5bb9a6c62b01a0c86d7569111842aefb711cdb

  • Size

    232KB

  • MD5

    5f2747b20fd2be4cc7c87840997323d3

  • SHA1

    877f8d77e17245f9c5ac89b040e1818af9d33b97

  • SHA256

    40a53943449d45c20adcf897ea5bb9a6c62b01a0c86d7569111842aefb711cdb

  • SHA512

    4bf714a4806c3f79b66e7d7ac93c077c05e355e6a628e6fa58efeb5b2ee632ba4b7c25e48526ad49a986523297ce24d0a65925ed0075e6f212cc7d1d45274ebf

  • SSDEEP

    3072:7qm+RZZtPAd8K8xw7usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121TzlbNRb:2JRZZed+xw6s21L7/s50z/Wa3/PNlPX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2