Extracted

• • Target

    d584cff4f75e3659772928c6a507f6a1fab566576faba9edfef2a6b78a3acbf9

  • Size

    96KB

  • MD5

    f0909008d05d5bcbf06a0047a7a13e2f

  • SHA1

    2516e5af7c0b7c3206ad84d0143f7f1efcd0a97a

  • SHA256

    d584cff4f75e3659772928c6a507f6a1fab566576faba9edfef2a6b78a3acbf9

  • SHA512

    a6165fbcb6e4ffdc4aad8ef343b728256f9ef029d986d1e1418d6a5f98534505d66303e70243be8a3aba51c11d1e36220a587d2465d2bc99bad0da1055640f71

  • SSDEEP

    1536:J0sBzJKWgXmhTd5KWTVJ5UlQAnJs3LtO1cR2cW13S8h/BOmTyCMy0QiLiizHNQNM:WsjK/mhTdYWTzoQKJs3LtOORE1Nh5OmU

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2