Extracted

• • Target

    0f3a8a87253338237abaceb60af223943467996a470093ed99c197cdaec44d41

  • Size

    128KB

  • MD5

    d0990c2f06cd82a7f685da93d50155c4

  • SHA1

    8124ac6db4d94e02f044dabfe0ea518ece236067

  • SHA256

    0f3a8a87253338237abaceb60af223943467996a470093ed99c197cdaec44d41

  • SHA512

    296dd47033972184360aaa23a4b7c6887498401dbb59077f7a1feead0f513abe7acada2da02606127333daf8adf2018ff5a223418a987b63f3cf5057aaea1002

  • SSDEEP

    3072:Fu7yMzJDuRGo2jiCREXdXNKT1ntPG9poDrFDHZtOgl:FuxzARt2jBCN9Otopg5tTl

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2