Extracted

• • Target

    86ebaae8da153b303325442b3fa00ec87f12bd7e46e346731151a8aa3170621c

  • Size

    84KB

  • MD5

    a622bd55f239226b73e2d3594a116214

  • SHA1

    5d2b355dbbbfed4545045242ef841a16e7d9a64b

  • SHA256

    86ebaae8da153b303325442b3fa00ec87f12bd7e46e346731151a8aa3170621c

  • SHA512

    2a5d298958557183f52e9f1e7a1dc71a6bc68ae8d0fe032e74e44f0911b5d12befbe08db2969fa6105684e50031a286755f056c2905b80deffb462627a632fe7

  • SSDEEP

    1536:ylvoiHxyL66hUZNdxWdMtrPVh70FemsyuEXSREXHfVPfMVwNKT1iqWUPGc4T7VLd:CRRQXhUZNdxWdArPV+FeyuECREXdXNKW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2