Extracted

• • Target

    e79c5fc8b6908fd797406dd2f427cf3929fc20479452c08e96070ff369a2dcc6

  • Size

    256KB

  • MD5

    a9f6fc74e88c3489d3d438daa281f79e

  • SHA1

    e8b76b4955981878c322c3763d5d425781fda8a2

  • SHA256

    e79c5fc8b6908fd797406dd2f427cf3929fc20479452c08e96070ff369a2dcc6

  • SHA512

    24de45e9c997c23c999cb4c0a2e6ae92da35900695362274dafaeaab6d68eee791978022a9a82b3234f235bbdb893cfdf66ae0c22d403b664815f1020723a76f

  • SSDEEP

    6144:dT8lc853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZz:RxQBpnchWcZz

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2