Extracted

• • Target

    c0a98006c92d796057fee5a5c3349f6a567ff53af9ba73b610dca5ac092e2fe7

  • Size

    93KB

  • MD5

    e627c15dda924c4b147d700495ef3774

  • SHA1

    2d774599ca1b7e44f318f79f3d4a21f17fa07a53

  • SHA256

    c0a98006c92d796057fee5a5c3349f6a567ff53af9ba73b610dca5ac092e2fe7

  • SHA512

    d5623efb7de9fee96f71320ee8ec97435f8e6243f982efcaa2165bc10ca794794a86466abe6128e3dbd5c17bf69915b9a76633a098590e3ed8847e808eb7d1b7

  • SSDEEP

    1536:dJz0SBq90+T+W7irXPmdylFBUT9DlO7uXcNvvm5yw/Lb0OUrrQ35wNBUyVV0:3zG31u+slFBE9s7usluTXp6U1

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2