Extracted

• • Target

    53cb355a987ce49bbe851ac38f8a4e2ef05f0f23456947101e3445cd2475b87f

  • Size

    84KB

  • MD5

    50250663c7ea613f00d1d618e7c75223

  • SHA1

    36a858b221619cd32c05544c56f8aa60dfae30c5

  • SHA256

    53cb355a987ce49bbe851ac38f8a4e2ef05f0f23456947101e3445cd2475b87f

  • SHA512

    9a4f48e03cd21b42266763054d7fd82e217358c494cc0928ad7cbd433fcb07b69feef4401fb679654994f09513b7e435286538b6d3a09dfd6ab3b4ea5760127a

  • SSDEEP

    1536:lywfT5ZoWO+xa4cm7caRsK+e6N6U9XSREXHfVPfMVwNKT1iqWUPGc4T7VLd:Uow+xa4cm7d2K+dN6U9CREXdXNKT1nty

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2