Extracted

• • Target

    af075d103e5194bf7ac9c8991b439ab701f3d578a9b69b21b440d3396475e1ab

  • Size

    45KB

  • MD5

    c633b0f564d591847257c35f5b020a96

  • SHA1

    4eb51f5eb6bbe22c5188468f02cbf58b98167bc0

  • SHA256

    af075d103e5194bf7ac9c8991b439ab701f3d578a9b69b21b440d3396475e1ab

  • SHA512

    82895a3ba275266b739a27be161993d6a649f837cf4b0f3397da51c4fed525dbd2d287eb6e1fc4f21c688f37600c7e73755c3ae9392d98121f2e59e0f2e9beb8

  • SSDEEP

    768:Rx07XIcCwx+WFPHuHu3CeVckL3YFc1QE6XUnn27SPwwwIlgfyGZrRc5/1H5a:RxQFL3CeVatE/27SPwwwIlgfy8ro8

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2