Extracted

• • Target

    98285bb371fc14f97494b89dabd647b61393e2d6844b9db678af9fbca261c0d5

  • Size

    448KB

  • MD5

    bca0897dbb6c729c70e0e9d24ebfe0cb

  • SHA1

    dd5641e2c661a3c0fb3d57d2ffbd631d21c6158e

  • SHA256

    98285bb371fc14f97494b89dabd647b61393e2d6844b9db678af9fbca261c0d5

  • SHA512

    7eca01c8fbe803f1b87aab791fd1e6936f01f68a469b913aae9a55067c17b88122fd787f7950baa131d0cba628bc3548dc02ded78d9c75d004fd4b42741db731

  • SSDEEP

    6144:h8yUQt3333R46s21L7/s50z/Wa3/PNlP59ENQdgrb8X6SJqGaPonZh/nr0xuIKj0:hX705kWM/9J6gqGBf/sAHZHbgdhgi

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2