Extracted

• • Target

    b8eb81db43374901e907dd543c3e8eb505f50f7866529c429cf2460198a4a582

  • Size

    64KB

  • MD5

    ccd000aab4e6f732873cf402a1062d1d

  • SHA1

    efaf3f67bd2593462c140c43da629fcebb1082e6

  • SHA256

    b8eb81db43374901e907dd543c3e8eb505f50f7866529c429cf2460198a4a582

  • SHA512

    b2704b29bb2d5c2a4faac857652744521699514a2ce150599dbe98c4ab77f786a8702471b4ca58756a0b5537c784c7cb9efc9bf9e4a69a901c39207dcb6b010b

  • SSDEEP

    768:4835D2npB4vhxX/MTskFEm6q4LTE/9tgKrreozb9/1H586XJ1IwEGp9ThfzyYsH9:mOkhEmLoTCdJTbXUwXfzw9

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2