Extracted

• • Target

    b41d7f27df1f5255212cd452e7670e49573e5502752181b65cde2dcebb2f98d3

  • Size

    64KB

  • MD5

    819af8f5c1dd82bd7d5fae06a9164495

  • SHA1

    826857f81f2e62ba9999733f3b45095aa3a98fbc

  • SHA256

    b41d7f27df1f5255212cd452e7670e49573e5502752181b65cde2dcebb2f98d3

  • SHA512

    f20386cd0845d835e0c0e0d5047f7c7fd5771dc1c817d8289ce0804fe793267a1d26deb79a7a49d6f977ac8b6a917ff5edd0770515d29adaf5afd019a30a03a7

  • SSDEEP

    1536:MrpVHm1dnprOSgQOIloLbwnYYYYYYYYYYYYYYAYYYYYYZjYYYYYYx88N3z:MlVWOSe+o8+z

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2