Extracted

• • Target

    0763e755366834cb3cff959f14fb43d2a89d01741f21118397b21e88c804c786

  • Size

    224KB

  • MD5

    9e0d2c8bd9b633d740194fecc92c3144

  • SHA1

    26d0b2f82543a85dd97e3b07c4c33f104ff27309

  • SHA256

    0763e755366834cb3cff959f14fb43d2a89d01741f21118397b21e88c804c786

  • SHA512

    95d2b3769eb06248065349e5ab37812af15e39cda3dab0eb6186191ec6a5542c99b829ef10d55db6515524b637d6cbbcd5bd6faccc23438a5b5fc2cc3dd3bbcf

  • SSDEEP

    3072:yjYeLMt9mjSkFenxIuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZtOa:yjYuMt4jSk034s5tTDUZNSN58VU5tTtf

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2