Extracted

• • Target

    5dbbc75fb0432ffe89b18cb1c8324adbd8ba640044d46383cc8eef03b3a18b5b

  • Size

    69KB

  • MD5

    48017b3d0133e7bd26a89e0cb89287d7

  • SHA1

    8a6010df9f17ea916390626b51ec62c7f32e8fc6

  • SHA256

    5dbbc75fb0432ffe89b18cb1c8324adbd8ba640044d46383cc8eef03b3a18b5b

  • SHA512

    8a5916173d9d4889b1e09a8e32d0fe6c8cfc2f4166e5ac07293c45ad6a4db30bbeccdeca5f00ff456949057058503e78b0df73029f89c27bd2583d29fa92a8a6

  • SSDEEP

    1536:pDorMc0z1R6MO0FTFCayKpZFeNein/GFZCeDAyZ:pDAMFAACpKpZFeNFn/GFZC1yZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2