Extracted

• • Target

    45a21d307141d49244eeacd93867f13ab54b1b86fb561b45ff4fd09e5b26c6c8

  • Size

    64KB

  • MD5

    38098149c4972bbcda8a2c24351f2bbf

  • SHA1

    6b36048189e616be71aa81d39f7577f1d7e7f125

  • SHA256

    45a21d307141d49244eeacd93867f13ab54b1b86fb561b45ff4fd09e5b26c6c8

  • SHA512

    d1c6599afff50d138c4a12c2192a148983e8c1ef18c7b8940717d1ff1bbc939d13dc0d980037443e8aeaa3d9e84d634cf500fc3cb113a7714e165b5f06ab67de

  • SSDEEP

    1536:Ijk5OCn9VYRI2mgD8P6Q9GlLBsLnVLdGUHyNwi:IgsCGI9nPLUlLBsLnVUUHyNwi

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2