Extracted

• • Target

    c8a1718cc3c77117c7db3683d95b7a38c0383b503d2d913175601122a96e7380

  • Size

    800KB

  • MD5

    fee79c72a7e6717c8c848b4b584841bd

  • SHA1

    eb3f811462173363ea90ccc17156a60f23ededc5

  • SHA256

    c8a1718cc3c77117c7db3683d95b7a38c0383b503d2d913175601122a96e7380

  • SHA512

    a74bb9173ad0737eaefcdaea6832e4d306d7458364c47fec0fe07d3735eb48d645feacee55bd6e42d1bcc141051e010f19eb9c740f4e70c2632846d135a1d1dc

  • SSDEEP

    12288:TU4A/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KFum/+zrW3:Tym0BmmvFimm0MTP7hm0Bmmve

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2