Extracted

• • Target

    ec1f595057009f0cb1cbc3ca3d0ba16ccd34d2bf961aa6029aa67bdc2122f612

  • Size

    64KB

  • MD5

    9bfc84406dfda49cd53bf621ab7df688

  • SHA1

    88ef4a0c3644dc4406b7c31854e1ec03ea638d91

  • SHA256

    ec1f595057009f0cb1cbc3ca3d0ba16ccd34d2bf961aa6029aa67bdc2122f612

  • SHA512

    c579b811569100cdf45d88ccefdb551a9b1be40944547b506c86f87a50a7574031aa0ee706b017a2cf8c1cb49587444ff0f3b0df79af1a05c693b99a5b5b9507

  • SSDEEP

    1536:G6Gm34sPOvPaKmi15cQ8Dp02YWyirPFW2iwTbWv:/GcPOHaA1uh+XGFW2VTbWv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2