Extracted

• • Target

    075d294d728371df21f619021d093f42b0d116a833b58955e2d52ec30cf26f20

  • Size

    64KB

  • MD5

    f7d846beaca4cc80fb4eb6b1b24caed0

  • SHA1

    ab93cfc1592d0753f37bbb3df5e7f2731e1b3650

  • SHA256

    075d294d728371df21f619021d093f42b0d116a833b58955e2d52ec30cf26f20

  • SHA512

    7026d270f6ae6ec39f9241fce6e1f92d199d28a783dd4f0fc9fd9acd7ffdcdeb12de115ddf1c00f6c069499b1f58ff931daf9f3dd8f34a8b51e348b8c20dc978

  • SSDEEP

    1536:2CKYZjqNWhObrJxxjIyMtbmWyzrPFW2iwTbWv:sKjqNWhsrJxxj+bmXXFW2VTbWv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2