Extracted

• • Target

    57ce380a7779e9a9f9df3af91ea52081b63527fd081ee304bcb7ee3171dab178

  • Size

    69KB

  • MD5

    d8134e50475fbef5ab9df1f15038a926

  • SHA1

    43a7435e1c0e4e35f2050bd6c0918e66b614dc1b

  • SHA256

    57ce380a7779e9a9f9df3af91ea52081b63527fd081ee304bcb7ee3171dab178

  • SHA512

    f9430d34b38146f1bff5d331fa649bb004c5cb2a5dd358724e65d27732d7e8fae7e2c733c81eef3cdcbef73849975f821df9074592969be0f1790adf6cccfda9

  • SSDEEP

    1536:znMALKMZJnHaKrkRU6+OrNein/GFZCeDAyZ:r3nJHHYRXxrNFn/GFZC1yZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2