Extracted

• • Target

    425d51dc6bd96986d5f534d75030cb6cecde4cf8f2f42950f737c70f40847b7c

  • Size

    64KB

  • MD5

    1ec8bf90e03f95d317489cf7c13f469e

  • SHA1

    97f0b64fc74d46b648a7431a5fc9ef64eae5db29

  • SHA256

    425d51dc6bd96986d5f534d75030cb6cecde4cf8f2f42950f737c70f40847b7c

  • SHA512

    449fbed33f862b9d80c2768d3ae159383eb5e253a8e8eadcf39c40b390857f872cab3ffcbd59b0e82d59b96b2e812779ef353a04ea214d7998815664b8b6d9c7

  • SSDEEP

    1536:vFXrJ9CsPNFd5I3fZCz4FUXruCHcpzt/Idn:NXrGSQRmqpFwn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2