Extracted

• • Target

    17efde0635edb8ef71e94491d0260a3b82a8a77a375640e93d27ecea243ed97a

  • Size

    64KB

  • MD5

    83d7fba429b2fcd5ab6323ae247024b2

  • SHA1

    4d64a051701ffe03920b30234db084a2037fb913

  • SHA256

    17efde0635edb8ef71e94491d0260a3b82a8a77a375640e93d27ecea243ed97a

  • SHA512

    6b175ab55a8e84d782eb78a34d8c9c64858e7a77efc247d41918140420b56fbd68b9efa07dfa04decf4a0449ea3643a67b3c7905697d9f4f31b42f7b03635169

  • SSDEEP

    1536:LI1h9QcBIanpNrSOLeT5Vxwn+qPDNXUwXfzwV:UfBIixAVOjZPzwV

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2