Extracted

• • Target

    87d2d44c6331a6ce350322edfc259edad29dd3850099fc347ced2443786424c2

  • Size

    64KB

  • MD5

    e8be191b8b6d43b1d68aebe9ec3da8e1

  • SHA1

    8840255a9e11ebb3526d123aedb5f4daf8cef7d0

  • SHA256

    87d2d44c6331a6ce350322edfc259edad29dd3850099fc347ced2443786424c2

  • SHA512

    84783f8ed1f9209ea862456c3f4acc6f345cc0a194d796929ed6fbb231aa6fe392bed62f3eb827d10fa696a7f117d454b7461143629dfab39775a59c06fd36a4

  • SSDEEP

    1536:H2XxMWvmzJeeO5z6fyeU5pTaCstXUwXfzwP:0qWOO5z6fepTaj5PzwP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2