Extracted

• • Target

    d8b25596a68fa5bb2a3c9a048ff88e6aa233973b0c5658dccd561dcf24f7e37d

  • Size

    91KB

  • MD5

    20dc3d07feeec0bb3f110ad650d5503a

  • SHA1

    edfff80c7003e36b0dc34d897f7cc1e174aadc78

  • SHA256

    d8b25596a68fa5bb2a3c9a048ff88e6aa233973b0c5658dccd561dcf24f7e37d

  • SHA512

    b4c4b20c5574050acd12575e1ee6f89faac2d1413a341b658d3c2b5abecd659ff2f4ca62a48aeead954b915e88b8b758357481ed30a58bcaa6ac9218cd1de1ee

  • SSDEEP

    1536:Vo4JYgY7Nj5DRcybH4KZF8QMQIi/95yEhrqvlLBsLnVLdGUHyNwtN4/nLLVaBlE2:Vl6rl5yWWvlLBsLnVUUHyNwtN4/nEBlX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2