Extracted

• • Target

    729d2091e1d8047aa08af3dfb7af68f1a28619fad895c612af7195f1d458ec6d

  • Size

    42KB

  • MD5

    6e0ccd265177d46f55f1211c24c25b8a

  • SHA1

    443945da12554abb9412a937736af8a0c9b2676b

  • SHA256

    729d2091e1d8047aa08af3dfb7af68f1a28619fad895c612af7195f1d458ec6d

  • SHA512

    5ff71b6686fa3a201bcef92e62d7be5ae00c1162da2e68c6e7b8a0a0a910af4850721efcc1278d1f3a4116ee5224d6103c53e1e229d07fd4bf9fe019ed932bf8

  • SSDEEP

    768:GHmPNTisyud7+DqjUL5ll9jYyWwZiR0iap9/Ggjanc5D6LeLra/1H5n:RV7+e4L5NWwZSAGgWc5Dm

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2