Extracted

• • Target

    acd84725286ff91785f05e6f84fd88a63414a37da921326574ad8a945f724129

  • Size

    84KB

  • MD5

    4197f8fba5dea4b318854515de88ef4d

  • SHA1

    310dbddf11f2749ab4fb9fcf7802d653c5733838

  • SHA256

    acd84725286ff91785f05e6f84fd88a63414a37da921326574ad8a945f724129

  • SHA512

    280d8f2c218d9ae31187aece350b44b9307d5cc74b40dbac62521301c271ddb12c3b6135aef34144aa1409ed8d34bf1b7e11ac20e8ed9d04642a004afbf93ad3

  • SSDEEP

    1536:15kRI2iANwGQfsjJA/z/+/z/z/Q/Q/Q/7mLpVKwZr6XSREXHfVPfMVwNKT1iqWU2:PgI2pwGSkW/z/+/z/z/Q/Q/Q/aLpAYrS

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2