Extracted

• • Target

    c2e332205e1371d38210847a5abea654a2417c00938338f67959968a60b775e5

  • Size

    96KB

  • MD5

    6ef60d37cecfae2779950cc0cb2e339a

  • SHA1

    19542977e865b6ebd3bab9733068e4567aa1fb3e

  • SHA256

    c2e332205e1371d38210847a5abea654a2417c00938338f67959968a60b775e5

  • SHA512

    188082532c795eee810416bb49ab3c753990ec638b82c0e3dc0f3f17974790348d3275f7d403b5e33bf0c4e7ac8f88755670d6349fcbe8982e1d0d41f6f4f003

  • SSDEEP

    1536:VbJTEvTVS8o1lw0nPLbwnYYYYYYYYYYYYYYAYYYYYYZjYYYYYYx88N3x+nK4duV7:VbmX0nP8+x+K4d69jc0v

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2