Extracted

• • Target

    b74608d4ab8c4ad8de133a50f583f91f56689222ec48794655f463779fa152af

  • Size

    512KB

  • MD5

    9f0e5f2d3c23e6d6ef701d67ce245df7

  • SHA1

    ed725bb808289c02072f10dd862ec9c831de110c

  • SHA256

    b74608d4ab8c4ad8de133a50f583f91f56689222ec48794655f463779fa152af

  • SHA512

    8a82f7390be5e4c79b8b5f21331750d09fe0339b830cd0d81c8cafa370c77dac988520af982e631a8813a0edeb3556b8ef17bfaec9a80ee42eb1b374f779fa23

  • SSDEEP

    6144:Yw29h853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZJ:YwGQBpnchWcZJ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2