Extracted

• • Target

    ab4bcca4cdcd948cd890fe4043df8637b89452b3c8ddb5c4b66dd07d50d00c6c

  • Size

    77KB

  • MD5

    52f404fde314cd99483b25dbc8064a10

  • SHA1

    9df98716751fbede76b1480f3f78319ec20414c0

  • SHA256

    ab4bcca4cdcd948cd890fe4043df8637b89452b3c8ddb5c4b66dd07d50d00c6c

  • SHA512

    d586c8fb094618958f3e6a249dc34243b39c17dc505d7f6f4b3460fd645c9706492c4c921685d03034a3994e4b63444dc7c1256d60a41f7ef97b1ca615fdd9a2

  • SSDEEP

    1536:VNaCHgxIW+v554wQTytVkIgO617DWkZFfScD7SzCbHWrAWG:V0CEIW+B5Ket1gOuGkZFfFSebHWrHG

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2