Extracted

• • Target

    401f9248b29005df0e0595e852c680b8ea53f90ec605176f464a777a144ea5a8

  • Size

    91KB

  • MD5

    866b11a32c14f6dc0935651bfd005666

  • SHA1

    7d8a37f6ae9c8e0a6a3f597ef45155fcadb35f3a

  • SHA256

    401f9248b29005df0e0595e852c680b8ea53f90ec605176f464a777a144ea5a8

  • SHA512

    96f2a7fd88bce95c945282cd062c1169886d1590e02c3f64e234f0861a8451cc3acc6363f8376975673aa6986b5a29bf690d87d246c0af9c8c7626b8c237c305

  • SSDEEP

    1536:ejc7HzQI0vRbQ9aqFlLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXd45J6:t7sns9vFlLBsLnVUUHyNwtN4/nEBlMd5

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2