Extracted

• • Target

    7b9cb6345c51178711bb881a953f8fc2a891e886537598dd4f21740def6be082

  • Size

    52KB

  • MD5

    4dbcb99f7c3d7e2be3ef1c2c82ff5573

  • SHA1

    e49c3b7648d1c5486c660cf40bfc45b2e0ff6eee

  • SHA256

    7b9cb6345c51178711bb881a953f8fc2a891e886537598dd4f21740def6be082

  • SHA512

    4cd34db407ca2c171a26b9133b3632d6cb85341b65d4f7da07c97012de0a105b321cdfff5dbbe149d3dbc6a4c044b18faa31643e55ff33b48e9c469b2f05c7ea

  • SSDEEP

    1536:Sr2QaLZzp4VluEOLVqacscmutAVaSkMAdKZ:VQaTEa2mutjSkMRZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2