Extracted

• • Target

    0bb5df9861d63fef515efe00ef82c04c709f23820c13539b097d31b64c456932

  • Size

    55KB

  • MD5

    50532c2f8350af08dfbe93244dfcf0a7

  • SHA1

    f7ba28b89d1239c3e9ea236ba1d556cb77b32ec7

  • SHA256

    0bb5df9861d63fef515efe00ef82c04c709f23820c13539b097d31b64c456932

  • SHA512

    7c6a34bac7f0f5833c5176f5b37625a3b1c3efd9e79de6d048103f2507497895668100c6e2822b24d76ee8c3a6e31929562fec2bdc768e7c482c3cf9bfe07ee0

  • SSDEEP

    1536:Fn8gEgjp6pYDP06Ktis6n5NSoNSd0A3shxD6:F8jpYQdt8n5NXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2