Extracted

• • Target

    318c32f62d8ab725863da97adffa88f6e6393e41ab0102db64eb7a0211cc3e99

  • Size

    45KB

  • MD5

    532f1c0cee88d54f8dea4d2b841d8740

  • SHA1

    87769a012d3eddbff5d8ccb3a2ed565b88541720

  • SHA256

    318c32f62d8ab725863da97adffa88f6e6393e41ab0102db64eb7a0211cc3e99

  • SHA512

    2755f43ec4403641a7810d986aa5c2c28883eb692d7816356d61907b6056f2a60eb2f3694be4fbd0fca2253ba06f7f7ab7c05efcfc60a74c0712f821a604078f

  • SSDEEP

    768:uTg7WYDQMZqnbt3d+Zm2s8VYBj2mkL955IeP7zTNzB/P7jYC+1N/1H5T:uT0WYDQuqqw2skYSLH/rP7jYC+1HV

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2