Extracted

• • Target

    ee0a95618e6489afee7ccd6e3bf343c750721be9a881f1b51024e7ddc8320f09

  • Size

    42KB

  • MD5

    5a70228e12a41f11ae6622fb06281777

  • SHA1

    69470dd5b1bafb43b7511e291a7e6c719d021ae5

  • SHA256

    ee0a95618e6489afee7ccd6e3bf343c750721be9a881f1b51024e7ddc8320f09

  • SHA512

    8cd86b987c59db6e19b4d8bed2c6dc6ca27b459e5d6f80a14a5e256645b284af04badd08326cc213d25137bbbc028d11675179eec2f205180f9dedb139380b9c

  • SSDEEP

    768:QB81+Tpq974blizw2nvy86/E4otiD3VGIl45Qlp5hJ+ehZ58aARVIK/1H5:l+lq9sOw2n68aiQlXhJ+i+

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2