Extracted

• • Target

    e708e2c3517e02b20cfc51e5d41e6e5bdd20d1aaf6ce1f35d05cea001a40c0bf

  • Size

    45KB

  • MD5

    304e64cdd0306ec924ab1aaf333e3445

  • SHA1

    5f11573de0f91d336ce6e5ddf6778dfd361f9871

  • SHA256

    e708e2c3517e02b20cfc51e5d41e6e5bdd20d1aaf6ce1f35d05cea001a40c0bf

  • SHA512

    ceb082bbeb38a23b75791334765fab4f345f0869e746a8a45d242895adef897f5397a9a8badd31420ba4444a5039f7df916bf44ce34aea77a9fb88a6b1574829

  • SSDEEP

    768:aUgp5tpqK8dA5KglhgEUN6ug/gXVl+8ABmQaw0Rc5Xs0VObv8PAm/1H56+:yp5tUW71UN6ug/gFl+8ABvX0R8sKWvK/

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2