Extracted

• • Target

    3d276a30d72b4ee51debb0276bda9b81f802a994d71b99102fdc9ce32d96bbee

  • Size

    352KB

  • MD5

    b52e2432241f3e5cb8145ff74bb9f0c5

  • SHA1

    1ecdd2128f9fe4674993b30d07fa714bbf9ea9d3

  • SHA256

    3d276a30d72b4ee51debb0276bda9b81f802a994d71b99102fdc9ce32d96bbee

  • SHA512

    f763e87e9b38b1fc4d84e240e6f86e3cf46001b6794e94c58786053a0c48b2fc783b6e685f1e3ca6066468bd632911f532855f69fcc9976eaba957a2e7522e81

  • SSDEEP

    3072:SaboN5DOvXfOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:SaboWX84yjwHL/T7Gsyn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2