Extracted

• • Target

    c165478c5756304610a242d7c12e2ab4e5223adf54828dde9e1dc2507cecca68

  • Size

    250KB

  • MD5

    b4bd101d44e4ce37eac9d4b51ce0b2c6

  • SHA1

    648b23bab236f2faa3cc6c3580c92851e1e21b9c

  • SHA256

    c165478c5756304610a242d7c12e2ab4e5223adf54828dde9e1dc2507cecca68

  • SHA512

    06bda7d0f9799672f8b67d0dc080a5bfcbb8a24040ac1b2ddae35869644a32c360ef5f3e62d56ee99d2dc6930578bc3d33057a79e4d9d2e9905d9ebb2747f0e8

  • SSDEEP

    6144:tAInDz2svCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:e

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2