Extracted

• • Target

    8e1270bb4cb27723a250bc6ba0f4d64a32e6eb7abec063ccaf891ca9e1069aa3

  • Size

    451KB

  • MD5

    ded58b8bcd7cef35cc48bedd35e373a4

  • SHA1

    0fcb566ac0613d8efbc0b653dcb7f84570a6c339

  • SHA256

    8e1270bb4cb27723a250bc6ba0f4d64a32e6eb7abec063ccaf891ca9e1069aa3

  • SHA512

    ff77136af85f32c24d93a4fc608732469dc2cf4fbedfd293ed2572903a32e3dd9c15e55fc29dc54ff3ba3e1eac3a1fa2e0941dd001d9f8c22be9b882b1e88b4b

  • SSDEEP

    6144:eWv8h/BCN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58VU5tT:egBOtoq5t6NSN6G5tbt5t6NSN6G5t

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2