Extracted

• • Target

    2198329903638a2121c04c04d5781cff3e2301ffdff4d92e52b2642cbee3dfbb

  • Size

    67KB

  • MD5

    c9dcc18ae5263f9037106661805ce8ca

  • SHA1

    232b75842bb8893b459312b7f15e0088606dd049

  • SHA256

    2198329903638a2121c04c04d5781cff3e2301ffdff4d92e52b2642cbee3dfbb

  • SHA512

    c99724ec3c727c5912c434101939366b345dd238b8fa99bb7a9b06730862dac1ef650e99475db1c1eb3f0fdd6c7ff0313de9db2c7d8bae1bf9612a5fe0cd3218

  • SSDEEP

    768:ZcXybtkxWOgMK1zJYA8ghe6e/UQ+/CAT/hOtQdkvX/1H5rxEVErME/feYvn1q/Da:kyGkZhD6AlRdkxLsJifTduD4oTxwf

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2