Extracted

• • Target

    d3b2edcf94b7ab487fa53a5ec6360385e8916036eec12acd19c58cbe555d1d60

  • Size

    128KB

  • MD5

    baefd1b0a6d822da97493b44a7dc9824

  • SHA1

    68d2cf78d424274a2b8f51d2e8aa4f49fd4df44d

  • SHA256

    d3b2edcf94b7ab487fa53a5ec6360385e8916036eec12acd19c58cbe555d1d60

  • SHA512

    4f4b0f0202c0896f1bdbe993c88c730bfd5fbc787911d9224a58a54a4f67ba0c6a4eafd634f4e925b326b710ccf4fd4473235512b3f050c7f46364d5489e0d45

  • SSDEEP

    3072:k9hw3qURWnDIcpLCREXdXNKT1ntPG9poDrFDHZtOgl:k9hw3TRnc0CN9Otopg5tTl

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2