Extracted

• • Target

    34bf3653041e7d502471091afd35673b554bc15785c3b647c51cbe884b5bd5d1

  • Size

    64KB

  • MD5

    eaa5029672e4910691c97c517c20e2a6

  • SHA1

    303650eae02a6739374e6faae3f3d35cd9d99fa8

  • SHA256

    34bf3653041e7d502471091afd35673b554bc15785c3b647c51cbe884b5bd5d1

  • SHA512

    7c3b20f2e7887633a4084dd7b97ef677eebcdcb365623511fce581453f1891092890280ce741a3bc6cac53d355e6df865b81379de03bf47ea492af7796f72d36

  • SSDEEP

    1536:RgZ1DRaQnNnXkPuY9wENWWyjrPFW2iwTbW:itRln1G9w8WXHFW2VTbW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2