Extracted

• • Target

    451fdb46fb996ac4531143ed6ecb5035d06ed583585b250b41889c3a9202e73a

  • Size

    96KB

  • MD5

    acd337a6f4e86ca3a2b3cd7728b92440

  • SHA1

    444f3bc600d6d18d5db56d84c77918b8051d184d

  • SHA256

    451fdb46fb996ac4531143ed6ecb5035d06ed583585b250b41889c3a9202e73a

  • SHA512

    7c3264eceb4741c46fd73ec4d275cc37dd80582ba60fad718f87a296df7f7c92d8652454d4909c15cf870476f143e6e4865bdfda265a31d2675d21ddc8b77fcf

  • SSDEEP

    1536:54/baKy3uWCZKcBuiTFcLbwnYYYYYYYYYYYYYYAYYYYYYZjYYYYYYx88N3x+nK4Q:5qaKRjoiTFk8+x+K4d69jc0v

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2