Extracted

• • Target

    79781582e9df46a3e9096e5623f167f92df49dc65fa7238ee031abafb563a0bf

  • Size

    88KB

  • MD5

    fc074f83a1ac0ff6e82afba020a9f8e3

  • SHA1

    1ed0ae2a2725817a995c950789dd299fd66f4b8d

  • SHA256

    79781582e9df46a3e9096e5623f167f92df49dc65fa7238ee031abafb563a0bf

  • SHA512

    325538d84a6f55aed5d3c5402b48f6f97f712a5dcca73d1ce75bff37019de868309bfe44b0d3f735f69899226115190b5633b94e163959865cb7d84f7d7b052b

  • SSDEEP

    1536:5S8Scm/vvzkmvTnIh4KwO7ZewFL8QOVXtE1ukVd71rFZO7+90vi:5xSn/vvzFTno4NO7ZdLi9EIIJ15ZO7Va

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2