Extracted

• • Target

    fb764126886392792ce5444170b9b67404a8db1f58db54cacfccab00e3e921ba

  • Size

    89KB

  • MD5

    e42a451935333391e31cb687fd6523cb

  • SHA1

    dccfe665c31ef2f6ae6d56ebb83b8cdd27675532

  • SHA256

    fb764126886392792ce5444170b9b67404a8db1f58db54cacfccab00e3e921ba

  • SHA512

    2a66bb665cc32c85b54095642e30fb164181688917b4932a7f1d14d79d91f3fd2291f386a131d80ddb4f7f3b822d0354c59c8cbaeb5dce93ccf056369fead3e1

  • SSDEEP

    1536:GiIMtNSDvm/7NX51/gdIej+H1j3LOQEDHy47WiNLiOWhpc3lExkg8Fk:G5Movm/ZTYJqRq1+QW/c3lakgwk

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2