Extracted

• • Target

    cf097aab3f89d0d80b5d39ff080be70d70ee66c2a74e42cb9eab19df21da5599

  • Size

    91KB

  • MD5

    4f7d85b148dc713479a13841c0d9fec6

  • SHA1

    debca2636de538728eec392aeab7cf994aeda72f

  • SHA256

    cf097aab3f89d0d80b5d39ff080be70d70ee66c2a74e42cb9eab19df21da5599

  • SHA512

    25795f48f6317f30d7802f41583a423b6e2474521cf6a5a50a3ef66f24f5e831e973a18eebc9c7fbbf936828ca2968dd7baf36d45f406269865aba28508b3070

  • SSDEEP

    1536:t5EAc7VSRykr10xc2vmbSnLyDXdi8pE4g5a3iZ8saqYko:DEzrk10x8zDN3E4xSzWP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2