Extracted

• • Target

    b42f6ca727feb52dced27daf3816479727be495127c8821bbd8a0291a9b68c86

  • Size

    59KB

  • MD5

    94db32a4ccd27f120e2d5df206b9ca9d

  • SHA1

    2b742df199553e625fd82aecceec6f2f7507d838

  • SHA256

    b42f6ca727feb52dced27daf3816479727be495127c8821bbd8a0291a9b68c86

  • SHA512

    50431ecc3ac16330b5529e15a1f02f7c93cb203146785cf634177159cc9796e5b88e12b9cbd15079d7e83fd578b056a4faadc1d7f6edfa1676889ac734b52a45

  • SSDEEP

    768:NFSKcoKEnzmsiEMYe8zD4vK1sIrRNdAKk5EqtPauPvC0pZ/1H525nf1fZMEBFEL7:NFSKcslMX8zYK2mHdo5bPFCwENCyVsH

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2