Extracted

• • Target

    2ad92c20c48d8ee122777603a1b03c515fffc9035edd70ec8b970518e21cbac7

  • Size

    97KB

  • MD5

    af793d27632009f885c6cc0535823b1b

  • SHA1

    a8aba92b5e1de3dc44dfd66f1045f62e43a574b5

  • SHA256

    2ad92c20c48d8ee122777603a1b03c515fffc9035edd70ec8b970518e21cbac7

  • SHA512

    a9d0c45d7a7099290af4c05f96f3925ac19139aca41e75d12e1bb8e6b54065960127180b0eec8cb7cff2ab3659f84717cad7c80562973876892c702916e6c61e

  • SSDEEP

    1536:4jRuSikAdB0TSk25MxPg/ucUdBlMPUOXUwXfzwE57pvJXeYZc:4jXivdB0TSk2gPguRBqPVPzwm7pJXeKc

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2