Extracted

• • Target

    21204b5fd68dd833c6babdb473fd60397e0c9bda90ca3a6d95554176ef244cb8

  • Size

    69KB

  • MD5

    a0ff7d712d8784a19f68e98e4c6e4b7d

  • SHA1

    d194ef2595cbd7b942fd865b36f92f6a2781f2ea

  • SHA256

    21204b5fd68dd833c6babdb473fd60397e0c9bda90ca3a6d95554176ef244cb8

  • SHA512

    bacf3c00ad907366244e117d438a0db04631ebec74d9f0acecb833b828a5d5710b09fe79221a8dfa859a1afeb29ca2911b0652337aa470f404fa119db46c8259

  • SSDEEP

    768:iR4nKcmRBcr+yBdmtodWGelJBMVA8wpk5I/1H5R+IYmtxj0UDYFiqlk/Gzi4ZEM6:iuKcmLciyBsoqowO0hNein/GFZCeDAyY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2