Extracted

• • Target

    e8c70bc0f56c9b86680ba92d07e3606e15feaf823802bc0ea5a35d56de192f21

  • Size

    93KB

  • MD5

    0b0b4f7e801c00fde64be02a620a6f05

  • SHA1

    7cd2550ac4decc7b4ad6718dae558bf76796f02a

  • SHA256

    e8c70bc0f56c9b86680ba92d07e3606e15feaf823802bc0ea5a35d56de192f21

  • SHA512

    fc1a93fa3a1f48b7c68c639e7100484b8c4da4853d986352f719932d8ae70b7391da90394eb5b343ca4306d8768980f3de94af701604d94d414f8ab90752687e

  • SSDEEP

    1536:zWa2XlAQkXEaUep24Rxrjr3/sBWh6ZYVepJJZIcqID59KOJk24VEI4Lar/ju7JCU:UlK0MfrP3kB+6We/nIcqIOOJF4EISi/i

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2