Extracted

• • Target

    0c7c12697f9a307e97e357dfbfcc050054f08338bbfa9ff249a972bd39a82177

  • Size

    91KB

  • MD5

    590805b2de989c59e51e067b6dcea850

  • SHA1

    9245e15b6ef1caa12128aa2f1ba29fc100bf220c

  • SHA256

    0c7c12697f9a307e97e357dfbfcc050054f08338bbfa9ff249a972bd39a82177

  • SHA512

    30350958b76385d3cea2e837860659e8f63e20be1f9f9027c398732b442f40db861448904b0ea69eba568b19da976d1ce4914f4205ef28658d7c21e74ccf92d6

  • SSDEEP

    1536:lg2MPT2WK9j1zRR/Mo0Qc4EgsIUw8YkAMo0Qc4sIUw8AMo0Qc4EIUw8YkAMo0QcO:GPT2XBzDMo0Qc4EgsIUw8YkAMo0Qc4su

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2