Extracted

• • Target

    89cb7c96cd0425e0a8e82e267949f1455edf287f8d0a984abc058b7f26d4ddd0

  • Size

    168KB

  • MD5

    c92ceea720851893ffe91194165ecb52

  • SHA1

    235c87b90960653b4359f0cc0c349ae142d1d2be

  • SHA256

    89cb7c96cd0425e0a8e82e267949f1455edf287f8d0a984abc058b7f26d4ddd0

  • SHA512

    90e1a8c30e3d9659f627152e7712277bf5294aa83bfb4e2b6871d8b7eedd8876ceed6ccd540aa46bfb40f940e810af609cf32d5cab74f0dbfdead8ec3db28d6a

  • SSDEEP

    3072:ajClhk2BApFwpDuJ8mF9YNTyr4p9t4W987u1j5FaoJ5pFwr:3hHBSFwpo8mFCNkq9tr987u1dFVrFwr

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2