Extracted

• • Target

    afd249af7f0b15f3845c3cc6e69542cfdfd8af35d5013bb399bd6038504f1fa2

  • Size

    85KB

  • MD5

    a16c2a3acd3cb3d77a3771c0a0f003f7

  • SHA1

    2c181395b2511974f786138815f22f2e005d8cbe

  • SHA256

    afd249af7f0b15f3845c3cc6e69542cfdfd8af35d5013bb399bd6038504f1fa2

  • SHA512

    d7eebca3b658648a8c7ca0de16916488b324e247974b4d65c0ad29bda0daba783ab31a3006878a754a1c15a007bbbb2b518ed8bdde1c6e64388ccf5812be2eb1

  • SSDEEP

    1536:f64mODOs64iWwzN04C0PiGzfHu51G5YclO7uXcNvvm5yw/Lb0OUrrQ35wNBJ:yXe64yN0nM5P2E5YX7usluTXp6J

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2