Extracted

• • Target

    e5bb170066e9d1069c9aaec7e8b8f2fe7d9ce9347d0fdb805476ffa7e313164f

  • Size

    704KB

  • MD5

    0126468f1074bfc7417afa9b2383d367

  • SHA1

    ca0ab1e16cce2b0419f4bdaf0e54ee87378cc253

  • SHA256

    e5bb170066e9d1069c9aaec7e8b8f2fe7d9ce9347d0fdb805476ffa7e313164f

  • SHA512

    a258a428296988b9f3d550fc47bc999bf5f529f8b7d72993a96ddeb7655a061b80baf9d00113c1f07e06166ca82b6b64acadb042311ba525ff0757e06998468d

  • SSDEEP

    12288:O9N/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KF4cr6VDsEqacjgqANXcol27Z5nN/:Sm0BmmvFimm0Xcr6VDsEqacjgqANXcoQ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2