Extracted

• • Target

    97977865ea21e268025fc0229575630b535d65bb0bd6a35641d58f6279d9af56

  • Size

    42KB

  • MD5

    c4d1dfd57e181b8e928a4fa1e61d6c19

  • SHA1

    241e4e3227c324980e3c5062af7d4c19f3758034

  • SHA256

    97977865ea21e268025fc0229575630b535d65bb0bd6a35641d58f6279d9af56

  • SHA512

    6879b615a662f0735ef52e0bbfaeda11707791e11b9930aa75fee3171cfd87e39c69cdb4e0026d210f8ede56d0835ecb235ac0ef117d1e0d0dac693a2febbce6

  • SSDEEP

    768:XuqrS3p/KmOAHfkrNtyO1WkCRNJGjzjdaGHwLHy/1H5+:RS5/KZCk5tyrkCR/GjzjwYwLY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2