Extracted

• • Target

    824e12229faae279728a1b89d7679a462c20427f318bddb9b23ea9df2d750902

  • Size

    64KB

  • MD5

    c42672b0f01bd02e1b9174c374343387

  • SHA1

    d26f6a4c8783d680309bfd8e5bd3202f3b3d8f48

  • SHA256

    824e12229faae279728a1b89d7679a462c20427f318bddb9b23ea9df2d750902

  • SHA512

    13df6dd3e63e93200ffd62e5f590a703045a75d9cf480bb8a04fe4657a88dae2f1e57246604af37629e721cbfb89166b564082da09f44adfbb41e2e4a1d598f6

  • SSDEEP

    768:rIiQFi70kTmwL47Rh42oPvDp4XOmypH0pcR8vn633o/PNadK/1H5Ol6XJ1IwEGpn:8iQF8Qw07RXCAS6p8Ga6QUXUwXfzwU

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2