Extracted

• • Target

    f9a09ea4ecdd8ae01d04e313d9c493bf58d15642fa5fc0cd0fe43d1e671d42da

  • Size

    264KB

  • MD5

    4b43e395b689959b60d7418c5084e9ba

  • SHA1

    c58ab3393c2c073da95cf2164605c41b1562bf73

  • SHA256

    f9a09ea4ecdd8ae01d04e313d9c493bf58d15642fa5fc0cd0fe43d1e671d42da

  • SHA512

    7bb6753d609016d89d5447a04e609484b1fbc3c6cf90d6e8efd1065cb2d7628b1bafe91bd216f2d13a07329262ee890eb46cb2fae5f3937373a8cf6034523ead

  • SSDEEP

    3072:1Olmxc3UkVXbJmE24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtye3+:Zc3GpsFj5tPNki9HZd1sFj5tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2