Extracted

• • Target

    a69f37a5baa48f1af60a1c6cfcdac890d2b05a256f4f678d71ff058af3604ee8

  • Size

    67KB

  • MD5

    bd8472fe7bf9c65fa43281df70833571

  • SHA1

    8ca94c0e67621dd7fa12a6c0f002f3eeb941a038

  • SHA256

    a69f37a5baa48f1af60a1c6cfcdac890d2b05a256f4f678d71ff058af3604ee8

  • SHA512

    4cc0b9d98cdf8d3fa602303e3b4e230520e9ca0c3f9ba8fb913ddd3669c8ef835c891cbb182a65d30c389dacfa6b2cf9acf83a67e8e52a767ccdf2808a9612bc

  • SSDEEP

    1536:WPngd9RRZHRL+w6PNkth2NsJifTduD4oTxwB:Mng/rcw6PyuNsJibdMTxwB

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2