Extracted

• • Target

    d1751f3736e0f193d3e8d1dadf3c9e8e71b295d2828ec9eee45e6dafd942d6ee

  • Size

    512KB

  • MD5

    db3ea1ec7c53aaabc17febe408262d2c

  • SHA1

    cff7678a7ab947e183e26e0c05dfbc71fb057375

  • SHA256

    d1751f3736e0f193d3e8d1dadf3c9e8e71b295d2828ec9eee45e6dafd942d6ee

  • SHA512

    4dbb71bbfb65f1db68cadbfc4135369129a8b4ac3ee52e20c94df0760e9b6f79ca892bacfbdad2ed1bc6fbcf87af8487bdb8d4ddbbffe28db6e3d404a9afa83f

  • SSDEEP

    6144:q3xsUgIUZP8VU5tTO/ENURQPTlyl48pArv8kEVS1aHr:q3qU2UG5t1sI5yl48pArv8o4L

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2