Extracted

• • Target

    8ba506eec7f432f6eac808eb403da5acf3f852635dc756baec84cf2d8222bd80

  • Size

    77KB

  • MD5

    c850bc942e7909ab4eb3b851f8a7c597

  • SHA1

    60d2c396003b15c1fec5f5007a6dc16593156719

  • SHA256

    8ba506eec7f432f6eac808eb403da5acf3f852635dc756baec84cf2d8222bd80

  • SHA512

    1f7ee6871872a2b299c3508e91adc653b1f60043259f4b4f1438153ab94230d6cd106aa4b8bb29e898ccf130a11d534cf8924d9a3246f824ba404c841ad62c54

  • SSDEEP

    1536:cMgRzr51fSlv6SB3CmZ2t1ilKLzzzzzzzzzzzzzzNzzzzzzprzzzzzzvxPO617DV:Ur51KlCSB3pMXxPOuGkZFfFSebHWrHG

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2