Extracted

• • Target

    b5f7d617f0244cce4f50e352ff4d8d9499e582e4ee4dfce611ae822677c51c9e

  • Size

    92KB

  • MD5

    f28de72fc57f603d71884ef95fb67d35

  • SHA1

    e392d9c195169bb7da20f47f887b2f3517c263b3

  • SHA256

    b5f7d617f0244cce4f50e352ff4d8d9499e582e4ee4dfce611ae822677c51c9e

  • SHA512

    8e86ecceffe260787c9a4d138b428bd418909a72e67193aaff60f299d0c9361bcbf4fd7bc40d6d0305ac7d8c10935b8ec42767abb8d98fa5517b51383088c3bd

  • SSDEEP

    1536:gVAkAfhkVa6tyUX3SKrYssssssssssssssHYj2dG+eo1xC0GZFXUmSC2e3l6:gPKhkh8UnMssssssssssssssHYj24hoF

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2