Extracted

• • Target

    ed2a89ced59e71e077c4b6a98f718e3809eeef1d81885ecf590bd3c1f9a57491

  • Size

    55KB

  • MD5

    949757d4e32a4567f84cbe8b90a9935d

  • SHA1

    c500c88f2f9cac970866aa3eaf99e704c3dfe819

  • SHA256

    ed2a89ced59e71e077c4b6a98f718e3809eeef1d81885ecf590bd3c1f9a57491

  • SHA512

    4a9e926d1e29df1bed36194a8b2063798c5426fe137cc17465aa6165120479c85e03fcf1446a9704ed4592beaf6db08c54cec9aa297c6613e774db776498f7ce

  • SSDEEP

    768:8E8JXtdi3lH0YXNtJmF4k0ZQItAIY1KsmzXOG1/1H5mNSoNSd0A3shxDfCO:tQ2VUg+F56tfb9v0NSoNSd0A3shxD6O

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2