Extracted

• • Target

    64fec9e4e7f9f8293f1427fe4ff57b7137a7be8d026a6b812c1463db28c610e3

  • Size

    64KB

  • MD5

    baf07a48182a918f74fbb0cc9c39b4f9

  • SHA1

    c4743124d1719c1a7531d14d95f2ae65b1122c7a

  • SHA256

    64fec9e4e7f9f8293f1427fe4ff57b7137a7be8d026a6b812c1463db28c610e3

  • SHA512

    08fa74b4d24a71e3df8b260cbde904c30f1e93e3948aa31e9ef1b46f51dcce9778226187fe5e7e91e5f1c4864a7204e6bb5ab8b05431d7e0ff0877d5aaff387d

  • SSDEEP

    768:7f2MRLmZaWc0egAiSgVkrr0qnQ/1H526XJ1IwEGp9ThfzyYsHP:7fRRuaN0egAfgy3RWBXUwXfzwP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2