Extracted

• • Target

    cd148e4e64d086a45146c58736c32e40f9ec69a416414c4a32c633075492a3d4

  • Size

    512KB

  • MD5

    c98a07bbe038f8d936287e9d620b53a2

  • SHA1

    cefb22b4fb60ccbe54158763afb733df6cc25263

  • SHA256

    cd148e4e64d086a45146c58736c32e40f9ec69a416414c4a32c633075492a3d4

  • SHA512

    ce511ce06807930e13abb185b673e0f2c65dd215cd04a2d7b7916044c36edb3cc42883d02609cb901274d96ec7ade4979308d1ef09c84683c6b1dd59ecac74d7

  • SSDEEP

    6144:80xQ7qulUZP8VU5tTO/ENURQPTlyl48pArv8kEVS1aHr:80xQ7qHUG5t1sI5yl48pArv8o4L

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2