Extracted

• • Target

    f54eb872b08c03bf0ca7512eca075f6082096f00ffae6606d272d95e080c8001

  • Size

    91KB

  • MD5

    e56f74e081dedc397a4a7ba8a6678d9b

  • SHA1

    e273a701371cb75d4eab524e6186fa9379f4dcf9

  • SHA256

    f54eb872b08c03bf0ca7512eca075f6082096f00ffae6606d272d95e080c8001

  • SHA512

    e0c5c5671b4c1abf4830453ce1d2264db07bb736da3d740bf133e9ce9d5beacf484a95fbbf5e8bf175775be20de85131b7a6225de3e3ae14d19631d51537bd49

  • SSDEEP

    1536:fitJaA/shcrYf9q4ZmzsriC3FSr7TiwkU6joqqIVLgO:mJaAk4uq4ZmKvFSr7TSUurUO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2