Extracted

• • Target

    babed5ddaeb1a8ff0f201388b6a1b9a7df2a67f71d76eabd219f099f3633b9ec

  • Size

    768KB

  • MD5

    e983db9d7d2467e08da2dbcb47930759

  • SHA1

    0e98f421569357d992eb873dae7f23ecd90f5e89

  • SHA256

    babed5ddaeb1a8ff0f201388b6a1b9a7df2a67f71d76eabd219f099f3633b9ec

  • SHA512

    257fff02271bfe3c1c6c53e2a373b5ad9830064d101b5857e57509aaf26528b96df9a5924a91dcc1d67b742a7f7b0f3ff55803e88513611fa49fdf6aee04f0a3

  • SSDEEP

    12288:9s1/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KF4cr6VDsEqacjgqANXcol27Z5nNm:9s1m0BmmvFimm0Xcr6VDsEqacjgqANXF

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2