Extracted

• • Target

    1335c59e4c04f01f9450fc5bfeed13e0f12e2a6f03cf8fb57efdcfba32d577ae

  • Size

    92KB

  • MD5

    9e45dd34c115d738b6655a28a42e3fe5

  • SHA1

    9f27a5fa070a4eecb63a1731e05b6ed3adcdbe23

  • SHA256

    1335c59e4c04f01f9450fc5bfeed13e0f12e2a6f03cf8fb57efdcfba32d577ae

  • SHA512

    3d67d5f42ead92b57cd99ada07b6d35c7f93465286f42bbea9e071d7cc27b270548eded1e75cac5716081994c30b9327aefd73ad4185aa161d3a3877d333c906

  • SSDEEP

    1536:8Wqu6KyUnozemY/kJFJEXfB/a3LLVl/DBYIs2/FBDmjzXbWOxnKQrUoR24HsUU:FwKUq//fB/aP/DBYCFBDm3LWX6THsb

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2