Extracted

• • Target

    3e86feff54289d212a8e1a2a037502c2e4620e03168de017eebd8ab3841a4413

  • Size

    84KB

  • MD5

    59f07e3797833cc78d3614a4a5904e67

  • SHA1

    65216bdd8e059f3b9dc2bd855fc3af3a49a71577

  • SHA256

    3e86feff54289d212a8e1a2a037502c2e4620e03168de017eebd8ab3841a4413

  • SHA512

    4a9743c9b0a9d49e49fd09fae7aa308b04a3252fbf204a90a93abd246f5e8369a0ee5453f574df70fc31aaabd253bea4d11046457226d1895623e303c9187ed0

  • SSDEEP

    1536:RoQO2E2yqbEywbxaA8ANZLvfPDyH6n8dEelLYR7xeGSmUmmmmmmmmmmmmmmdGnZ:RoQO2E2yTvFB3PDyH6n8djlLYR7xr3

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2