Extracted

• • Target

    420f3e5c6785910fdc4ed33ac4425eacab33b9dd9e7dc96d180b4a35cbd2042a

  • Size

    92KB

  • MD5

    e7e7aa306cfe662712d90111335d3d90

  • SHA1

    4c37c1eb7f955b72e5fa6f4af4245ae32837da14

  • SHA256

    420f3e5c6785910fdc4ed33ac4425eacab33b9dd9e7dc96d180b4a35cbd2042a

  • SHA512

    1ae489a29cbef5b53cdc4e9006c710566dfb51dcdcd17223804088ab48130703e29c26c83636a08fd4296172bc4f63c796f2c7b33d2067f36ba505c023d0b22d

  • SSDEEP

    1536:Axl18BPljQ8YR+jStfTP54R4Njx7ztz2dG+eo1xC0GZFXUmSC2e3lO:iuURwQLLNjTz24ho1mtye3lO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2