Extracted

• • Target

    31eead9b99898f341c75f359f53dc45668a07790ed4fb10dc493b5db670de9bf

  • Size

    237KB

  • MD5

    baf498f5f98e5ac6d655ee1916b0d37a

  • SHA1

    b909b86bc543bdf25dbe36939e24ac355024a2d7

  • SHA256

    31eead9b99898f341c75f359f53dc45668a07790ed4fb10dc493b5db670de9bf

  • SHA512

    38d3da1b361f02e873147cab52acc7e5eac8a48f36146d941aeec7651feafee35a9e6fdb864fc425fed338ae4f2cdb34605f94d709526c83d304c5cc97f7a06d

  • SSDEEP

    3072:t+9iQmFZRevyaegcPAUbj8Nq75Sq4iqnAUUjE02ZoL9snKKq:t+4QmFZRevy3PXj8U5ihYjEToZY8

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2