Extracted

• • Target

    39cc67e4f75d283d6aea09cccb7abd0c910f016f2d91e507a3d5de1add86386b

  • Size

    97KB

  • MD5

    f177193c32a39891305ba759bb9ee033

  • SHA1

    c00341c96f35acb09ee571903851d83bcbb901c6

  • SHA256

    39cc67e4f75d283d6aea09cccb7abd0c910f016f2d91e507a3d5de1add86386b

  • SHA512

    fd936d190b884a4ca6b65a7f61c68d6c83f0452ada4f2bb1210e7d44f879f3eaad660919e2af1eca4ab6f908387a547ed5f970054b500d2812f0b131bebe4ed5

  • SSDEEP

    1536:XVzLFPRhg9m3H4c7lbry4c0kS9C+5btXUwXfzwE57pvJXeYZE:RLtTg9m3H4c7l60PrB5Pzwm7pJXeKE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2