Extracted

• • Target

    e6096b656442ca1fd78eb12828a1e0aa6c29c121b34e8b608297c7474c0e6954

  • Size

    72KB

  • MD5

    a0a8906e8b60021f7c3b4b5d2a39b908

  • SHA1

    6323dae8df6b49a55c5f92ee3cad8799cdf8ae5b

  • SHA256

    e6096b656442ca1fd78eb12828a1e0aa6c29c121b34e8b608297c7474c0e6954

  • SHA512

    1e98b078536764c4b1f057fc0e42fd075f71fe75b4cb93df89be285d033f7282e444e2aba742988c4356c14d2dd716bad81c38fd92b18f68c00da45681d0147d

  • SSDEEP

    1536:tGO0ftAZcJrgFMW5fpK4IN6N1NBo5PgUN3QivEtA:tGXftAZ5CMfy8N1Xo5PgU5QJA

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2