Extracted

• • Target

    f99d4125267a630cd4bac90543cf52fe2ab799201511fccc5b15bdfc12e2bf2f

  • Size

    128KB

  • MD5

    a090a1c23e4d70bbcfebd7d364681842

  • SHA1

    08f2ccef2ff1d6a5807d7eb59fe74ac22c297d98

  • SHA256

    f99d4125267a630cd4bac90543cf52fe2ab799201511fccc5b15bdfc12e2bf2f

  • SHA512

    743689272043d3bddfcd3e36385299ccbfd3ab8392c49f6aaf06ea7de7cb9e4cdef979fdcd147b111f5117d756674d8a3f04a845b684d68adc77a3fcfd4280d2

  • SSDEEP

    1536:9iO2yt0MeOC0iU2F6AslQjILQ9FKGXllUDtM60TD4ruhiZlrQIFiglF9xZ95Q:9iO2ytAh0yFTssKG7UDd0pCrQIFdFtLQ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2