Extracted

• • Target

    bb733129490628c4c9049fb06c9e42fd0a82e17ff6b665cd0d5b4810250a252b

  • Size

    182KB

  • MD5

    9e83e22f31745ec29f87e53de3a3a4dc

  • SHA1

    b02dba35f029998e80954222462cd23e2f96b6c6

  • SHA256

    bb733129490628c4c9049fb06c9e42fd0a82e17ff6b665cd0d5b4810250a252b

  • SHA512

    08dae85ebc5835bb4d3032ff57051d360fb755db9eda75d66e802553b424fed553ae6e373c66eb8293d1876932cbf09a4c7de998ef753db110c562bf5d785a69

  • SSDEEP

    3072:e3veTfuS3j3KUWv6VA4a5UzqE0aeiX2zrRbK6L3c658Dvx8Hq7a5UzqE0aeiX:YmXrWv6VA4aCWMvX2nR5JIx8K7aCWMvX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2