Extracted

• • Target

    ba24ebdea875e53e9ea78b1bfa791ecb243813d4aa13ef1b67064bed9494cc87

  • Size

    69KB

  • MD5

    8176f507b7366268379baedd4a562732

  • SHA1

    efba6b1663e6aa03fee13079b2e8b179d0a0c649

  • SHA256

    ba24ebdea875e53e9ea78b1bfa791ecb243813d4aa13ef1b67064bed9494cc87

  • SHA512

    aecbf644d92063115f7fb2e3920768284b36264a5553d2ab8fc8d0717096c33c6cffec01bf87a6dbf33e8fd96ee619087cf196cc9626bf599bf139d0b4be6e45

  • SSDEEP

    768:T4tQNewlBU77OnkSNbfJefAG8W+MYTMsnTcWWsqcccccdBm+a/1H5R+ZYmtxj0Uv:3e0qH8NMYngxANein/GFZCeDAyY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2