Extracted

• • Target

    3725e97da451aa781dca6a23a465d7b14a4256f53d32d3a947c7b499e5bd5e99

  • Size

    69KB

  • MD5

    3fb13f775a0ecda4037f1640618fc4fc

  • SHA1

    4a6716467519c9089fc12626c7cbb976e625233e

  • SHA256

    3725e97da451aa781dca6a23a465d7b14a4256f53d32d3a947c7b499e5bd5e99

  • SHA512

    d277bea6bea972e513dc608c3d7b52bbeb09e873295cf268a957f47b071526961751ad050c0dc9ae7b03bfffe51466d75a3ff3689a5b0861e8f15d3dabcef790

  • SSDEEP

    1536:YerU0ZtgAW9pXGEzE1phAMNein/GFZCeDAyY:Yerhtgr9pXxWhNFn/GFZC1yY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2