Extracted

• • Target

    0538f1fbb50fc68d596bc95f75d6fd963a15a41a1e8b465fbe4abd16ef202d44

  • Size

    67KB

  • MD5

    3ed95acfeb40c393e418be4838864ce9

  • SHA1

    8416e25edac8c73bac27050f825ce0cbf3ae2e3a

  • SHA256

    0538f1fbb50fc68d596bc95f75d6fd963a15a41a1e8b465fbe4abd16ef202d44

  • SHA512

    3622bdd4def66a91ce0514327e12e95021b7ad903f1a4ab15ef1461d39b99196a3ee8c4b18b39bd8e9ab28e32d1d2efe881e46c2f7d8b89172b3fc70e54a7b21

  • SSDEEP

    1536:9d1jR+nxZDOC3y2gC7J8aOJCVpQepsJifTduD4oTxw:9MnbCAQC7J8a+UQysJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2