Extracted

• • Target

    53344172994d5c498607ff70aec330cf34dc250241d8434349e3b08c3980592b

  • Size

    80KB

  • MD5

    7d6d1a453402c2e9a4ea8377cefba6f2

  • SHA1

    e4f17dee4b64d4760e24ceb8637feeffa32b6a9a

  • SHA256

    53344172994d5c498607ff70aec330cf34dc250241d8434349e3b08c3980592b

  • SHA512

    3a6ce0e36a0086ef98417927b590d4c0b6eb5819f8d134e175466e77e8733f84830ec156f0983679afe4ce4e2a612fdfbfea6aaee2f584ad3ada3465d23cfa5a

  • SSDEEP

    1536:MG5TVSyqWTqJHwoy6FHru2c8+KAssJXcqOxL8ZTzbcJ+7zNjSKOhYXYnTmmFeJur:rPcJQZ2c8+KYsEXNjShiKVFeJLCN

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2