Extracted

• • Target

    50735b9a23e831d95f41332ce39a2a3d6e27e78b4ee89f6f6ed644c06bb7b3e2

  • Size

    77KB

  • MD5

    6d4557a257d8461256983e855736acaa

  • SHA1

    8a0b3f88ade69031c3c6341b679e5ff216c21cdc

  • SHA256

    50735b9a23e831d95f41332ce39a2a3d6e27e78b4ee89f6f6ed644c06bb7b3e2

  • SHA512

    263a960b8251ed6eb8708304f94dbc9480e108439830c158025d034e5823a38e4aa6b54d433c5a9dee2f7049a1ba655ebce9366c5d9164036e98116b0cb38d70

  • SSDEEP

    1536:ZkhmJv4Cp6DWRQ5aKDSZcKOCO617DWkZFfScD7SzCbHWrAWG:ZkhCAyWWZcKOCOuGkZFfFSebHWrHG

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2