Extracted

• • Target

    3c7f0efd49f3b642f583e2b5c9d0739fd4bbfa88853d95e980dc7ef7df2cfd99

  • Size

    69KB

  • MD5

    37c084dbf92005a5bb23ae20efc75343

  • SHA1

    af0b0f2b2e5c022c5c6b3b81e955f30a7c95a040

  • SHA256

    3c7f0efd49f3b642f583e2b5c9d0739fd4bbfa88853d95e980dc7ef7df2cfd99

  • SHA512

    74dd36199e3a137a083d988b8c354a9ee58e5ce5e2165486d7992349cc2b59fd2908d135d6da6a37233028fa7de75d3f3552415735d17e952965f3a1e0f05a1c

  • SSDEEP

    1536:3MzLQU/BDX8koQfBu3LGxORxXk21ObQnQByNein/GFZCeDAyY:3tUSo2o2ZNFn/GFZC1yY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2