Extracted

• • Target

    9235d15e7edb4f4f985dccd95b7a26c9837bb2a52d9a89af7e8b9dfb51f57cd5

  • Size

    69KB

  • MD5

    89f1f5eef91c073df1f37165424ef9d3

  • SHA1

    f9541baf53e46f6e20ad15d0ae0b134c6e9a6849

  • SHA256

    9235d15e7edb4f4f985dccd95b7a26c9837bb2a52d9a89af7e8b9dfb51f57cd5

  • SHA512

    ceba2e8d8b379b3563ac1870082dd82f20e93aec8e720693e7421a42c51002ecbd908438661d04754ba25b1c25f395e8c643c2c3930eedb3a6208570fd16bfa9

  • SSDEEP

    1536:3jNOdQWjLVJ4L0S++X9xIgxyhVQSofHNein/GFZCeDAyY:3jcdQWVJ4L0S+w9xITsHNFn/GFZC1yY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2