Extracted

• • Target

    9fdae608f534f10852e5554c1425216883c082167ace3d8ed5c799c97ee5b8d0N

  • Size

    728KB

  • MD5

    b35b4c4b37280388c2d08b000b1e6fa0

  • SHA1

    6651346d2839d7b80eb3bf88c8fbcd6bd77a52ca

  • SHA256

    9fdae608f534f10852e5554c1425216883c082167ace3d8ed5c799c97ee5b8d0

  • SHA512

    24bb56429e702a1260fd070d433873d9005aef2c27363708cf716703db81287dd9069497f16dcee58192857f6983c1078ce26d28d97d83f253a035c1849b409b

  • SSDEEP

    12288:LAPxGs15tLs/EO/ACmgs15tLs3Uis15tLs/EO/ACmgs15tLs:LAXy/EOYC+y3UNy/EOYC+y

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2