Extracted

• • Target

    c44cf469d1055d360ca79179048a4f1519876a4b0ede64adb446fce03981e6a7

  • Size

    93KB

  • MD5

    3efb1c28b7a9bc3c8cbd2352f9372a0a

  • SHA1

    8923b478bbc41af486185c740df27922038d5d3c

  • SHA256

    c44cf469d1055d360ca79179048a4f1519876a4b0ede64adb446fce03981e6a7

  • SHA512

    95b11484e3b7a62529a2a86d7d2e4338fcbb9dc130209e27bba379a30648c856f50a0f6127e9cb368d1d14a712347a3c6b106710033289d353c34e1d22328605

  • SSDEEP

    1536:pKDZB+TwwSdAmPgGKC9Hn2lO7uXcNvvm5yw/Lb0OUrrQ35wNBUyVV0:pK9c/2gWHnx7usluTXp6U1

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2