Extracted

• • Target

    363966c3255e5a90d193813e06ac1e1da279b4b1a3679ac3635c8aa7e8dc09e7

  • Size

    64KB

  • MD5

    6bc67c9227b26bba751323413e5029d5

  • SHA1

    0c001777a326fbaa8b4bc3bbeaa2c1c569342e21

  • SHA256

    363966c3255e5a90d193813e06ac1e1da279b4b1a3679ac3635c8aa7e8dc09e7

  • SHA512

    b556b4ff388dee12b4fec7f752488a7eb825d4fe256712a834d421138f27be2f103fb6b07442624fe3716c837d0e802c5bc19c23b7b96b26fa045f7abecd2296

  • SSDEEP

    768:jI0JX7P7/kSjKxTwjHftJfjm0hTZ+4Gwgb3nrCpJvX/1H5UD6XJ1IwEGp9ThfzyB:jI0Rb7/fWaDiaUrwgbGpP+OXUwXfzwP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2