Extracted

• • Target

    e6ab7935affa9ef194967c7aeaf4ffbaf8363692932c2d943f6b3095837cb85e

  • Size

    67KB

  • MD5

    a640bf84bf580ca26f58586ccccf3351

  • SHA1

    aaa9e9d032cab85806fcf1f97bb6ee54e6bd2048

  • SHA256

    e6ab7935affa9ef194967c7aeaf4ffbaf8363692932c2d943f6b3095837cb85e

  • SHA512

    33f4469950fd1c929455f8584b8c0180c41cf80a20bea25738419398ffc225ec42ebfd3da4863873bd81a057ed658f76f35ba29f08ff89820be8d2933ecce084

  • SSDEEP

    1536:cwAxMEPT1/eCoTHJc+Gy0XgtY/sJifTduD4oTxwB:cwPEPT1/HOp5fg/sJibdMTxwB

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2