Extracted

• • Target

    d007ee96a0255c4e115462fa0830cad42e0d647c0734e8b828e64180d18a7cc7

  • Size

    52KB

  • MD5

    f3fa2ebd801ffe4bf8be9bd3f9fde160

  • SHA1

    b7fbbe9bc7e1bf24c70c84ce9dfbf01c9701b320

  • SHA256

    d007ee96a0255c4e115462fa0830cad42e0d647c0734e8b828e64180d18a7cc7

  • SHA512

    ba1047335d8f2d6abd573838b69c91ac35e87e64c490e9749a357b95b9ce3fd346f6cb5c9022e28055c18d4c5c077cb344789a5c45ef562b2793197618e81dd1

  • SSDEEP

    768:5rPr5bQEuqg3JR1M57z545adtG1ztokX7daHLgLnCqVhOpTiLd/1H5F/sLjMABvy:5jRtg8z545ctEztBLd1Vw1uiMAdKZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2