Extracted

• • Target

    7459eb695019bf1c94e99e168db193ffdb260a982edb8917f1ddc036864253f1

  • Size

    69KB

  • MD5

    a38ed5fd49168dc9049b4744569b43f0

  • SHA1

    85867731f82336eaee3dd78bb488167eab89a989

  • SHA256

    7459eb695019bf1c94e99e168db193ffdb260a982edb8917f1ddc036864253f1

  • SHA512

    b8e7a29ec2c3c25f7b946dd6fee8f2630592cc1ce8a86de8e4f1a4b8219e2c93952062d3b70b1b48a79692acec60b07e04321694a2437bd6009f978b0a731eba

  • SSDEEP

    1536:bShlJbg3pFMqhC3Sv5wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww5Iwzwwwwwwlw1g:IxQvOLJNFn/GFZC1yN

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2