Extracted

• • Target

    6732d9851f4ed581a4d8500af027f34b85255952518ba51341a9b73d05d30011

  • Size

    64KB

  • MD5

    c922d3f201ec567eced9725e6503c076

  • SHA1

    abded61d799707f36ba163ecf83495554703f36e

  • SHA256

    6732d9851f4ed581a4d8500af027f34b85255952518ba51341a9b73d05d30011

  • SHA512

    8ba974a46207aa14bbc1a8ce2147a8f3fd762a818ff9e300609ae06c917826af061a5ce48a78472e3985695bd294099672e4ab7bf5e9cb207abe3491631fecae

  • SSDEEP

    1536:gfUn2IunhKCY0bVLC4gUXruCHcpzt/Idn:32IuQJ0bVLCLpFwn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2