Extracted

• • Target

    eb82ab44bb8e027daa660a8dcf206dd02bb5393c72403c4f6ac7b3e3ac0d1b11

  • Size

    64KB

  • MD5

    e6c8e5a5add407bd98ef779c3b7fb7f2

  • SHA1

    8ec044e9408a723240d68f50230f1f9d0ef8b175

  • SHA256

    eb82ab44bb8e027daa660a8dcf206dd02bb5393c72403c4f6ac7b3e3ac0d1b11

  • SHA512

    2a9585435b25833b1e2c24dc3f10ed8001e51a18c29af0da50cdcc38490d17c2a291a20d313afab84d95c09c58d10271c1f9fa7ee46ea68d06f5de4ec8fb0c62

  • SSDEEP

    1536:tdfw1I5BCaNXt6il9K/T+PB0jxXUwXfzwv:ICrZNXgilCTOulPzwv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2