Extracted

• • Target

    6b62aaeeefc0a7ea3ca1a133c1cedf85fe8531e37914316b03b41af8b92ba330

  • Size

    88KB

  • MD5

    f9a7a517d620a5c296f67351400f9c49

  • SHA1

    fb56c46f65a7c52f671c803800c833a78e9d0560

  • SHA256

    6b62aaeeefc0a7ea3ca1a133c1cedf85fe8531e37914316b03b41af8b92ba330

  • SHA512

    270397d37b5c667a3add5a8d48f65467a841cd84ffe6cf25218b9967aa472a189ab6f5b5e77989fc307e1f7914cf9ef0f78bb06550cee3550e4d878f6daeb4c9

  • SSDEEP

    1536:xKTbmt/bY4jRM7p/ZuwFL8QOVXtE1ukVd71rFZO7+90vT:xE4bUZNLi9EIIJ15ZO7Vr

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2