Extracted

• • Target

    e909241823d4c54ab8ed8a19091b37ed31880b8e89f2ebb8fbce8a209c0b575c

  • Size

    84KB

  • MD5

    a4af8f396ba256635b06d2293c37e0fc

  • SHA1

    a3c018322fc0095650ff11f61d85be6a8d60db33

  • SHA256

    e909241823d4c54ab8ed8a19091b37ed31880b8e89f2ebb8fbce8a209c0b575c

  • SHA512

    b5899c134dc297b1f4b11e573a2be86eb91ac6dce55d4904464ad3c9f59253eb7810d8d73dd20764cce449ba6183c1c5b849260a2efb245d06db8d9d4d6913f8

  • SSDEEP

    1536:yudSAcP3sumJzTy0Mq8ANZLvfPDyH6n8dEelLYR7xeGSmUmmmmmmmmmmmmmmdGnZ:BdSAU3XEvCy3PDyH6n8djlLYR7xr3

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2