Extracted

• • Target

    d1fea45c5e1161f81bf316b1f93b5e23029b66a4985b5505e133208e518c8438

  • Size

    67KB

  • MD5

    411b07a5c81f271cf8dc1cd8d89831f2

  • SHA1

    cf1011178bf433a616e956b236faa334af7856fd

  • SHA256

    d1fea45c5e1161f81bf316b1f93b5e23029b66a4985b5505e133208e518c8438

  • SHA512

    d882f41b4279bec2749a46ab37abd0dfa36563a3e09de9e5fd0166df8962f975d0c26697d3f5d2a1f03ed35ebf627946991c210a470731dd0c14eb0ee05e6313

  • SSDEEP

    1536:Dh6C9olue288lRdRyKmQsJifTduD4oTxw:F9oluV887HxsJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2