Extracted

• • Target

    6ae5ba17bb27e7031f7ddd7ae831c7a9f3762998fb5a4c473dbe8d73b6b46b89

  • Size

    96KB

  • MD5

    b43a165e6d4d43b166b021274a9f9f9d

  • SHA1

    7c66cf0d5f3881d1c11f5b79739d9b3408daca8d

  • SHA256

    6ae5ba17bb27e7031f7ddd7ae831c7a9f3762998fb5a4c473dbe8d73b6b46b89

  • SHA512

    f6d740007a279f9c9ba8f87843dd71e3899f5c5a53812c4f74dbed10a1542dcf7ccf9ed383ddfac989ed6e01ab348da4901362faf211519cec75d08be325f45e

  • SSDEEP

    1536:+nAlB2nJPdv0o40QV/KTbhA7d+t9/qjGyGAW6cih/BOmFCMy0QiLiizHNQNdq:YEBE5lqyn8d+XC/GrTih5OmFCMyELiAd

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2