Extracted

• • Target

    fd5c77ef2c8ecb6e932b4ad231a7a12dee8c09cac7928417c1619aa22281f1d7

  • Size

    346KB

  • MD5

    0d66986d9079d8022184d392dfc69ae6

  • SHA1

    d6d12fbc81d2a69f13b5f8a2470f3cce811c83e2

  • SHA256

    fd5c77ef2c8ecb6e932b4ad231a7a12dee8c09cac7928417c1619aa22281f1d7

  • SHA512

    c04c0098c70389176130b89ddb664b0d0023fcd2aed054c48e8152f29058d9bba8a47b6339f30c2b61a6b4454b560290cf831c75888c4144c3375e6a646952e5

  • SSDEEP

    3072:jVMZpwrwoDR1PgU5QdDrFDHZtObmOm3AIpwbjshrmP24ho1mtye3lFDrFDHZtOkF:RMMPDRlho5t13LJhrmMsFj5tzOvfFOM6

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2