Extracted

• • Target

    7e6e23e68e99f2974fb9e9baa685024eebb1f2392e0dffa5219f363938015fc0

  • Size

    194KB

  • MD5

    35aadce56b78d0c5829a41a8eda0fa30

  • SHA1

    607c2f46d2326e29c62ac067d7fbc5ba7b9f9742

  • SHA256

    7e6e23e68e99f2974fb9e9baa685024eebb1f2392e0dffa5219f363938015fc0

  • SHA512

    9fa2568dd1487142f081da79af5bfc421fd4ff56965dc19e9ab6c5032fdf18211e8cb2dd8ee29c5e43a7f01899fd34b9c6a70512995d2b6a7aada22edfee90e0

  • SSDEEP

    1536:NAewuCh2UyJK5VzVwt0ZatMIM/5/KEatMIGuatMIc/zT4a5GV:2XoK75wumMIM/kEmMIGumMIc/1GV

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2