Extracted

• • Target

    e2afda9f84cbf847f93295b4afdfb197f4c6ab1c21187900453e2384b924d75a

  • Size

    128KB

  • MD5

    f552dfde7afa9a2ac7c9f9a08a3a8612

  • SHA1

    a99187f8566f41d0c03c41c061185557133aca26

  • SHA256

    e2afda9f84cbf847f93295b4afdfb197f4c6ab1c21187900453e2384b924d75a

  • SHA512

    05bf3865a0cd2c8323eac31d0ff78ed1134c50c68ae06a6543033fd2a46af86e87852d5ff2fbc2899ca8f29aac489ca539eee613081a50e7ca23f5cfa5dea1e3

  • SSDEEP

    3072:ighh2FYF/pLly3lNCREXdXNKT1ntPG9poDrFDHZtOgl:iUMWsYCN9Otopg5tTl

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2