Extracted

• • Target

    e229c71c103faa7c15616aa2b87b44563af8e94af1e07fdeee385102ddd8b31f

  • Size

    224KB

  • MD5

    411714a8f0786bc2fc1757348edbb395

  • SHA1

    17a95ed41db866c83db88d3c221e10e2adf96911

  • SHA256

    e229c71c103faa7c15616aa2b87b44563af8e94af1e07fdeee385102ddd8b31f

  • SHA512

    7c7e708c86b4158b64c7d2cfc6e3d0072a76986f12e5f505b0d74c62dc8fd1c9d341b6b067a7a7fa6e582be60223b1afdb3b17cc84770ee1219eeb3c9ebc1395

  • SSDEEP

    3072:uDtYrYqoGYRNJEo3IuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZtOa:uZzRNJEot4s5tTDUZNSN58VU5tTtf

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2