Extracted

• • Target

    d53445550810fcd0f3310bac76dbe103246617edddf479e8cff4cd1b0ebd1484

  • Size

    64KB

  • MD5

    65be2c1ba43fa291767c35ab60b37ef9

  • SHA1

    9b2810ef41097fd0e0d950b2235a31e89a219030

  • SHA256

    d53445550810fcd0f3310bac76dbe103246617edddf479e8cff4cd1b0ebd1484

  • SHA512

    144e0e5f2a34594455c35a1c1fc6eb6793fba82e62311d3fa3c91275173d3cecf21a13d0d7c81852766dd44f06a7bc7be5b4ed5a0869f1fce00b2f0288fbdb4d

  • SSDEEP

    768:MowkSoBcGgKpDXIOugDI9C8fIVIHB3EOisU9tgg/1H5Er6XJ1IwEGp9ThfzyYsHv:F4OugmCTqih9ymLXUwXfzwv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2