Extracted

• • Target

    5ae3ad80aa7c5bcf03a3f13409b83319c913ca349659a84ca0df9dc9ca97890a

  • Size

    77KB

  • MD5

    e0b39f4b83caaf055d55c45637b3dab3

  • SHA1

    6c228a23b756daa9761b62a82828aeaae6e6a440

  • SHA256

    5ae3ad80aa7c5bcf03a3f13409b83319c913ca349659a84ca0df9dc9ca97890a

  • SHA512

    4ca1a7741f1ead8caabe0e7f0310ad50fca497462f4f10c5af48df7ef22eaf4fb9fc7ccac0ace7d947c1aa758b67c6e91853ab7235300eff5c8e0c066689b8d2

  • SSDEEP

    1536:jGEhR9Yorzlpt+eRvJzO617DWkZFfScD7SzCbHWrAWG:KESuXsyxzOuGkZFfFSebHWrHG

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2