Extracted

• • Target

    de5d70134150408580f60590fa519cca38ad65ac4c0c01caa68e8c41a2262157

  • Size

    101KB

  • MD5

    e6dd28c52be3d0770bd37222905a5446

  • SHA1

    f9afcd44b7810f15dad638721662bdc3c68d20d3

  • SHA256

    de5d70134150408580f60590fa519cca38ad65ac4c0c01caa68e8c41a2262157

  • SHA512

    847b0720b9e97f7b1c6706e0cc084d112ae80e3e43d7328c472f9fadcbab24678b2a0fbbc21f7b685345bc6d534f9919c32011f832787cf5ec9ee5cf2598f3d4

  • SSDEEP

    3072:2G2DFXrMpFPRrNaHSZ3ntFPduXqbyu0sY7q5AnrHY4vDX:2G2DFXoLRrpZ3nc853Anr44vDX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2