Extracted

• • Target

    85bbcc60ce36be5a9f6b6992796f2ce99d2edb69f2d7194a5c11ed75dae2cdd3

  • Size

    264KB

  • MD5

    c0b619b5d7711ea4bf9ed61392534e6e

  • SHA1

    22b7e22dc25fb4deea7ea26000bf0d0ce17f908f

  • SHA256

    85bbcc60ce36be5a9f6b6992796f2ce99d2edb69f2d7194a5c11ed75dae2cdd3

  • SHA512

    da5d598b2cdaecf428335011a9e0da9d9bed70dd0f675f557fcc319ccbf22d88bd4fdae1f6b24ad61aed2b1385d29d6590f3867f68c27b98c99c98723b5f1c48

  • SSDEEP

    3072:I6fgkY5lF24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtye3lFDrFDs:I6Y3jKsFj5tPNki9HZd1sFj5tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2