Extracted

• • Target

    1b81f5300badac63c5d45f5a76e3804c6a8f3f54c2f52a550b1870bfd4a0b8b9

  • Size

    1.2MB

  • MD5

    bdc3dc81f5d8fc4635adeb8e0e79c180

  • SHA1

    7b98a6a272c0be405d7341a139d7670b421f3a56

  • SHA256

    1b81f5300badac63c5d45f5a76e3804c6a8f3f54c2f52a550b1870bfd4a0b8b9

  • SHA512

    1613ab2c8105955a872bb70fbccf3ac3c36d6dc6deca16557ff66c9cf981f73b596cfd6d0375d940b49e01321fc38fbc963f09a4c28a4404b99f4beb72c0a759

  • SSDEEP

    12288:Ql8kFv/WHCXwpnsKvNA+XTvZHWuEo3oW2to:URFXApsKv2EvZHp3oW2to

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2