Extracted

• • Target

    43b4d3ce55bb07a6f22dae849e65794869f6b5af270e51a88082153b628c7a9a

  • Size

    64KB

  • MD5

    9fbf7ccd4359f50262299fc83b5c7c6b

  • SHA1

    58c34a4a96f9b37b1b0e9e8412326469f1f994d2

  • SHA256

    43b4d3ce55bb07a6f22dae849e65794869f6b5af270e51a88082153b628c7a9a

  • SHA512

    bd27726632330f7235dabc061952e639ecb71a13b1d01f595dc360b8fd969be29278973fe18ac8cb4cd01e165bcd554ca9a633b33bd8eefa48f391828b184dea

  • SSDEEP

    1536:7azsRU+satXoIdndj1tHlKI7KOXcWyKrPFW2iwTbWv:7aZNaKI1tSucX+FW2VTbWv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2