Extracted

• • Target

    d925fefabaa7e2c45284ed251a1090522a07ab67e60ae1fe59e92a4de0f1f0ab

  • Size

    108KB

  • MD5

    7ef5b4ce35dee2a3646b4b97dc75bf70

  • SHA1

    60b7105f75e306bf1dee26f8650b0bc177882cd9

  • SHA256

    d925fefabaa7e2c45284ed251a1090522a07ab67e60ae1fe59e92a4de0f1f0ab

  • SHA512

    abec3cecdcc84db075f6440b761d01c5ebd85e5c294d2f8aebc9bb554df712268a6361137461a84233703e35bc2f26ab90b48742ac60227b9a562c8bd60c3ffc

  • SSDEEP

    1536:KtqWv4XlP6Tcif1gggi2MwB+rjm8NiIqhn3HQ8BawTj2wQ3K:KXo6Tc3PiEUjmOiBn3w8BdTj2h3K

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2