Extracted

• • Target

    b77422f95322b4810ba76e90af5462ffb1ee4db88cf56d26094ff1b894bc2097

  • Size

    63KB

  • MD5

    54d2765d412f5e8028d7b077d7af895a

  • SHA1

    4c6dabafac35d081d44c69e123b80e8d0be39f22

  • SHA256

    b77422f95322b4810ba76e90af5462ffb1ee4db88cf56d26094ff1b894bc2097

  • SHA512

    e4ead4542b61e0308716d88bd2e9f9b64b632f3ac16478815ef06f288b01ae9a6a42e89db0a97df8ff774d31dc10829bc3cf2e999e7a1b0428fd89ba3989b154

  • SSDEEP

    1536:LG0FxLNZcgaVNFW0HYnIS0D2NJM+VRjEn9rjDHE:5FNNZcgazFnTD+JMoJk9DHE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2