Extracted

• • Target

    2805decd8b6ca71e274459a3987183effc551d6278c45ad4955e4f7dce2b8227

  • Size

    97KB

  • MD5

    753275d968dd769bdd1644fdff82edb4

  • SHA1

    8385da50caa9d92e3dc3e1c20d7ca2d216e83ee7

  • SHA256

    2805decd8b6ca71e274459a3987183effc551d6278c45ad4955e4f7dce2b8227

  • SHA512

    7bc558749230ae1e090b558b6f62e878ea098d6d2c7f3895468602e157d71a6121a60ce16ce70344211ef0926c0875199e545a2a254f0729a86992603889af38

  • SSDEEP

    1536:gny5UIwjSi6BeGHr/f3k0bVLgaUXUwXfzwE57pvJXeYZE:Ey5UzjBsbHrnkaVLgBPzwm7pJXeKE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2