Extracted

• • Target

    f7c4ea4b24001be36a81974d47891c3872ff7119bfd965ab6b0d9f3ffbe08580

  • Size

    101KB

  • MD5

    ad2a680d1fc2131928b05d3bc25ca84c

  • SHA1

    82367a177b160b817bf568b4c47a42da072d0991

  • SHA256

    f7c4ea4b24001be36a81974d47891c3872ff7119bfd965ab6b0d9f3ffbe08580

  • SHA512

    1423dfb809b76ac78bf4195ccfeadf06a62fd27706d3641bdb78e7c23f257d8989c334e40aed62ada8630761786eede92e8fdee0549d887eee44a5cfe3576922

  • SSDEEP

    3072:oWx3mXE00rWS7ISOjbf3GII6OWANSPduXqbyu0sY7q5AnrHY4vDX:Nx3mXx0rWS7ISOjbffIMAAc853Anr44T

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2