Extracted

• • Target

    fb3499e596c672e024cb610e9bb667541f2cf0a3e5b0714e77dc3ddd6658962c

  • Size

    395KB

  • MD5

    bcbb97c4550fa399836f5bf708130106

  • SHA1

    b85d03c3f65fa818497c7dc2a9dc87e4a1097ee6

  • SHA256

    fb3499e596c672e024cb610e9bb667541f2cf0a3e5b0714e77dc3ddd6658962c

  • SHA512

    b2a130af7f905dd2fef970dbf2d794309d0b8c87bdfed4d66401e9da53cdf6d69a61eecad0582d54d7b750a31603b0cd96c47ee38763d09f2caf8ec142a9c5f2

  • SSDEEP

    6144:ubvh9s4y70u4HXs4yr0u490u4Ds4yvW8lM:F4O0dHc4i0d90dA4X

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2