Extracted

• • Target

    def7987301d1112e2f87fbe82d5da00882127c7ce55cc8b00b4b0dec50d11952

  • Size

    69KB

  • MD5

    d8916e83247433a4a3a9615380e3288c

  • SHA1

    a7d9dd4d0bd0c454acc65f1a4843a509305f01a0

  • SHA256

    def7987301d1112e2f87fbe82d5da00882127c7ce55cc8b00b4b0dec50d11952

  • SHA512

    4b5ede72c2eb60691efbf712a26f95f5f91d751177e8f001b481ea07ff4b2d4f13613bdbec45601d0b58dab30660e6d200291131e60345a950abe01fe317b41c

  • SSDEEP

    1536:IRLwAJP4suAmNxlsq6MHHDcYz40eiNein/GFZCeDAyZ:IRLcsuAmNxlsq6MHHDcyoiNFn/GFZC1U

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2