Extracted

• • Target

    473f720adb2435f8ea32db5d4995899a27507f2b107c14fa7af94fedb54491ce

  • Size

    85KB

  • MD5

    5454e2433bbf9d7ff72a30d069086b68

  • SHA1

    5c3ff61962442cccce7a8b41c12c180561c4d922

  • SHA256

    473f720adb2435f8ea32db5d4995899a27507f2b107c14fa7af94fedb54491ce

  • SHA512

    8eb015b42803fe77a953e1b858d55ddb534181359f4af2b4650777d97877f2e962458d218a676ef2af3a9f5af0ccee1a6056f2f4a75bf4c6dbb3ff17f13324ff

  • SSDEEP

    1536:3vaPt9agq9+MOPiELftlO7uXcNvvm5yw/Lb0OUrrQ35wNBb:3W95EtE7m7usluTXp6b

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2