Extracted

• • Target

    72209bb1d36a384dc0a3bb91f29ced350233935f56b6c61929a82035b988d8db

  • Size

    67KB

  • MD5

    e5633279b9f721db3c70e346dfda2573

  • SHA1

    70ebf249d77ec2a6d6505cd4991ebdac8f21376a

  • SHA256

    72209bb1d36a384dc0a3bb91f29ced350233935f56b6c61929a82035b988d8db

  • SHA512

    7362c48cc5b65bb352c60a60082ad3ccaf40be3be613c8034bada895e1f0f212f49fc733f86a6accde7ca4b689672d2753fc6c86b656704df85c0704f47aec23

  • SSDEEP

    1536:myce/P5/wYDZZcpHbMMoI+kpPsJifTduD4oTxwB:dFw2Z66InPsJibdMTxwB

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2