Extracted

• • Target

    22949d92026edb9dd118a14a8f6f3655e1937dfa8b5831b693a5b475b9ce50cd

  • Size

    64KB

  • MD5

    b45dd4c73af7e64b9b505bc021bfecc6

  • SHA1

    d9258017c7cf4838721a770c6e1362130181f1f6

  • SHA256

    22949d92026edb9dd118a14a8f6f3655e1937dfa8b5831b693a5b475b9ce50cd

  • SHA512

    e56f161d638a47456fc4e8b78b7fcb967736de3b2b21b73df4a0570c6c442109eee38969825d1d366c18867234d3c5b641b4f3aefc3f5c2315cd3b73c7d04541

  • SSDEEP

    768:qeO/qZAaB7fr7LgDqy6zAEt6G/cDXKUvl/1H5IQ6XJ1IwEGp9ThfzyYsHd:9OAAaJD74K5UKYaxXUwXfzwd

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2