Extracted

• • Target

    0742f79e3626427d01e3b59555eb4524d74539c01bdd86388a4b40c01d5dfe2b

  • Size

    91KB

  • MD5

    d8afe7ac1079a4a745bf0dc26418e665

  • SHA1

    38c505153bd14c46f90c0dcec656e8883464a7c9

  • SHA256

    0742f79e3626427d01e3b59555eb4524d74539c01bdd86388a4b40c01d5dfe2b

  • SHA512

    77c1b9fff327cc7fb83c0d01395dc48eabff0c782e71decc1a47333a234aaac91a58c458cfb632b6c34b6e85d1952accaaff0ac98f79d34098461ea848af9a9b

  • SSDEEP

    1536:rkyNBchfIYwQZUizHiz4JT4OQuwriC3FSr7TiwkU6joqqIVLgO:rYhfIxQZUYHiUrQdvFSr7TSUurUO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2