Extracted

• • Target

    6ee1f6ef0e1f257210f0575d98017c9f091d64beb2f472916666abe4d3918595N

  • Size

    379KB

  • MD5

    febbc0374e1f08588b180263ce9ee410

  • SHA1

    dcee434a91fb247608dce3d3ad0b675380c374a3

  • SHA256

    6ee1f6ef0e1f257210f0575d98017c9f091d64beb2f472916666abe4d3918595

  • SHA512

    24a774ffdb9ab935fb68782eb713676130b51641091b1b5ff6dd75e7c846df1c7dab8f8fad0944bfbda22a2935ff2a692558d5ed29da2a7e9eb66cabf7780082

  • SSDEEP

    6144:hwOHNrli7O/0xLxli7O//yb1c3ccU0S6GyTgfiEkrE:n/6vxr6lGHaXyTg6EkrE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2