Extracted

• • Target

    3e30a8767de4c64a15fc39cbbabf738448e5d387f34be0df4457477e5fe3c3c9

  • Size

    362KB

  • MD5

    95bff33a75ebc2c0d347eab202c3e78a

  • SHA1

    733a5fb72409276be40c7d18465a9c519767efe7

  • SHA256

    3e30a8767de4c64a15fc39cbbabf738448e5d387f34be0df4457477e5fe3c3c9

  • SHA512

    d95575734bab12891e7438963ad9663d1c69307284cd2ae19a7615644179b4a0febcdbfc2ad909c78264c47c640da7b68440d496831da14bca4dc07ab1628f63

  • SSDEEP

    6144:NT3xq+5tTM0nJWlp5tT/hSbK3rJk5tTM0nJWlp5tTB:53xH5tQcUL5tzhSb55tQcUL5tN

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2