Extracted

• • Target

    948050f8cd820c544b16ed708315d86f595af26e9755f6bbdc9db37f9ad2189e

  • Size

    428KB

  • MD5

    bec8ce86618b514933b08d9295e711b1

  • SHA1

    6b8d5f0ecc6e14efb1d44db364acbafeee505c1a

  • SHA256

    948050f8cd820c544b16ed708315d86f595af26e9755f6bbdc9db37f9ad2189e

  • SHA512

    0eb1a5d6b2477edbf785efd1d89c419829b2b5d9dd33f0274e150765cb886b6ffa44997c4b9e7d00c8c0be1058cfe2babb1cae522204c7a3f0f31e8f0aaf111f

  • SSDEEP

    6144:UCvgl5ZXZuKVp1fNrNF5ZXZ7SEJtKa4sFj5tPNki9HZd1sFj5tw:Zv25hjtFrNF5h0EJtws15tPWu5Ls15tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2