Extracted

• • Target

    dcc498f24008b14e01da869bd8fb6ff6dc83a3e014ddd45038f643e77756c561

  • Size

    72KB

  • MD5

    f13f4fd0e0a21070119f217408419f14

  • SHA1

    b493f596a69c71514c9edef31829fe1ed999c094

  • SHA256

    dcc498f24008b14e01da869bd8fb6ff6dc83a3e014ddd45038f643e77756c561

  • SHA512

    ebba6b85a8044ab582e8db065908d9891404dd19f90884155da11907be594efb4a9eb1469272298cc985b25d71965b981871b65bddc1a095010e948d0fa573b6

  • SSDEEP

    768:x7dtXTJNvrfBnVN7AE65emQYLjILF1tDa1lTetv/1H58iU9UiEb/KEiEixV38HiD:x7fTzvrf2ImpUZMTetB+PgUN3QivEtA

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2