Extracted

• • Target

    f9421f0ad674713f6cbeaf2de39c0abaf65c6c3f6ce2a8f24397ebb417aa9a0e

  • Size

    422KB

  • MD5

    fbfcdfe950554c44e71a8e50e130fc35

  • SHA1

    8deec8d8a34b529c7b02a29a53fd50a0c07600ee

  • SHA256

    f9421f0ad674713f6cbeaf2de39c0abaf65c6c3f6ce2a8f24397ebb417aa9a0e

  • SHA512

    00460df009709c825a911d135587c8971d868b767ddacf949fe4f002ba339a3ec04a5a3454359a6df8079b76fd68c4eb170d4e43046e662c64d75cb260e7c395

  • SSDEEP

    6144:W5yGktpXUf83babO6FSPnvZU1AF+6FSPnvZhDYsKKo6FSPnvZU1AF+6FSPnvZq:W5PaNUEGaXgA4XfczXgA4XA

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2