Extracted

• • Target

    4014e52ccf965b4add4a61cfdb38164f5eb492cd3f46f70e3444d238ef554a74

  • Size

    84KB

  • MD5

    8f08e68e81d5791ec7e854287dc91930

  • SHA1

    5f562d52d8879c12dc58ca74faa1e67456f864de

  • SHA256

    4014e52ccf965b4add4a61cfdb38164f5eb492cd3f46f70e3444d238ef554a74

  • SHA512

    56b3949dfdbc5efba72a43c7e90e97854b030e819354d29a96db0ddf2ce5d8675a62d9edfa7979b3574e9d08885ed2fbd5a22f73028876c32d03238fd4f0949a

  • SSDEEP

    1536:/aG8/Q68S/W9EW7JO4o1nelLY4XSREXHfVPfMVwNKT1iqWUPGc4T7VLd:/mI/SEEbNdee4CREXdXNKT1ntPG9pB

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2