Extracted

• • Target

    cd593beb08f7212e775ec7307d456131771b9ec8c8e7f70f398035860aea7736

  • Size

    64KB

  • MD5

    ab5057a95b6a3874559413dd8c6f05bd

  • SHA1

    66633fffe86b16514cc57521847f3fc34a6c8a2b

  • SHA256

    cd593beb08f7212e775ec7307d456131771b9ec8c8e7f70f398035860aea7736

  • SHA512

    1376d034ffeef1bc1bfc77acf17e0ce0ab454a47cdf721c209659aba55d069b73d9fb3a8b17b9c3d65cdbbec2b4a77834a0bb006a9a76437ffcc199296ec00b9

  • SSDEEP

    768:EOSTpqJiAsAO27UI5uUpFHTFnZhEIJR+p0m09Pff4o79l/1H5S6XJ1IwEGp9Thf+:ETNbAjAI5FpFHZZhEM5f4MftXUwXfzw/

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2