Extracted

• • Target

    10db45a7eeaa9f417ed39bc2ac02f47a2592c94942ed31eda7df8e04c46ab413

  • Size

    84KB

  • MD5

    e5321c36770e481e54b1f780efedaeed

  • SHA1

    6f97acdf2f712747279d36f9e275e76460046ca3

  • SHA256

    10db45a7eeaa9f417ed39bc2ac02f47a2592c94942ed31eda7df8e04c46ab413

  • SHA512

    19e18533d5d6e080d08f392c76da4175bcba012d35077a6036c4786c1a108b0fd24a880d60e692ced9d07c3d2d545bec1cdf4d0ea2730c46a3fdc8bf2d0d659f

  • SSDEEP

    1536:3WN/IRODP7aYZ6LXSREXHfVPfMVwNKT1iqWUPGc4T7VL3:GCYDTaYsLCREXdXNKT1ntPG9pb

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2