Extracted

• • Target

    c99e13a7452cab6d62d45a9e386468e329536c841765dddf22e87da5762a0c5d

  • Size

    84KB

  • MD5

    d050b81b655f5c565b67cbe74fdd9c02

  • SHA1

    40e5513be3a5f6dc902b9b9ab2cca1a62ad2fc3a

  • SHA256

    c99e13a7452cab6d62d45a9e386468e329536c841765dddf22e87da5762a0c5d

  • SHA512

    c51e5f0dea07fc10a4263226d9cbb9725e6eba12b20f8bd181f134a285ffa4be4fb74867305ea49efea280fa505ed73296f192cce2d7b257770f2d2c70359fba

  • SSDEEP

    1536:3+r3dFPzQl/OcyQUP6VmdnX5sGovuXSREXHfVPfMVwNKT1iqWUPGc4T7VL3:3+r3LPUl/OcyQQEmFph2uCREXdXNKT1m

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2