Extracted

• • Target

    bcaa759fef11f6d178ddec6afc4b394ff92fd40770f1e47fe62db54ea61a2534

  • Size

    352KB

  • MD5

    c8bff3f563fb1c8039a44f0b37e8d5b3

  • SHA1

    7d9919e972d63f997ae589237924c1c44d3a2bc3

  • SHA256

    bcaa759fef11f6d178ddec6afc4b394ff92fd40770f1e47fe62db54ea61a2534

  • SHA512

    8923d98d647b14199650a89f34e0b66fdefbfdfd52d9a4eff2bf1cf2306b11f53d0461ff839fdb5e0aad1d3d38e443c1189b85c93a64403dde18b53dbeaa3f2b

  • SSDEEP

    3072:vH+S9DsDl5u+8OUyOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:vH+S9DY5u+mb4yjwHL/T7Gsyn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2