Extracted

• • Target

    492f686d0b5a8e73bfed952c3aecdef939d8a6ddbfcd6e22053aab54a4baaf55

  • Size

    42KB

  • MD5

    e19e0062db92ab64930f6d0f1d9b1a9e

  • SHA1

    4dc910661ce25bd545d36fb243429e1d4e43076c

  • SHA256

    492f686d0b5a8e73bfed952c3aecdef939d8a6ddbfcd6e22053aab54a4baaf55

  • SHA512

    f7d5af070c5c76350a18c3a55bc7794797f798d4d4f1e3bf7520e7069a8f572d731052347507bd437b0a4d0110e897b8def657fe594a90b7c8e76d56334c7355

  • SSDEEP

    768:t43LLKkFTyb6g+5329CgTxi4c25pog/1H5nt:QGFD1ivmd

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2