Extracted

• • Target

    5fb93f8822598d24aa83c2edbd0306346736f00b8be0198476e0efe0f0bef831

  • Size

    344KB

  • MD5

    a8db6d4ffd624140aacad2791529a514

  • SHA1

    401fffd7a04d210265b7c64e059cb4e1dd321a05

  • SHA256

    5fb93f8822598d24aa83c2edbd0306346736f00b8be0198476e0efe0f0bef831

  • SHA512

    a992d744c009706bf0ee2027b536d92d345bf6af9cdfe170ed5ed0dfb8451ce6abec4585bae845c9605fb804099a937a9d592fd729be375eb0be2b6072b58f25

  • SSDEEP

    6144:pYkHr/CpX2/mnbzvdLaD6OkPgl6bmIjlQFn:OWCpXImbzQD6OkPgl6bmIjKn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2