Extracted

• • Target

    d3b8b8081c2327eda8bf56b25279f2e329fdf8098b6bdc9842015a77d579ae7d

  • Size

    77KB

  • MD5

    b06399acb5021b30b537128f8aa5dd08

  • SHA1

    39f98033eb81df73f0bdfea9ca4df291937e7078

  • SHA256

    d3b8b8081c2327eda8bf56b25279f2e329fdf8098b6bdc9842015a77d579ae7d

  • SHA512

    7ee8300df13b129e02bed009a3659f85e7e0c7514c592cd26eab038ec348a04284249d4c94bd2112ba26bc71238c9388d9c598e3bf20c47096c443d7d52f0277

  • SSDEEP

    1536:siwW7aNRPKFKFdpKUtvCjGjerJXJO617DWkZFfScD7SzCbHWrAWG:s9W7+PKF8dpKeIGjSJ5OuGkZFfFSebHf

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2