Extracted

• • Target

    11d030dda1a187d15aeab43672815192882a2b53b452ca583972e10e44d31266

  • Size

    409KB

  • MD5

    a8f9d64bde9914f7c67ac5ffda920bdc

  • SHA1

    6bf61a0269c85e6000de849e1ac089a3b0eef690

  • SHA256

    11d030dda1a187d15aeab43672815192882a2b53b452ca583972e10e44d31266

  • SHA512

    9b57cdd7eff77e5f92f97244bfc8c1f499cd18539486862e31195eebe3aaf00cf85dfcd863ebb7e535b1d8fc94968f32635b781f6566e298a073c5c6e96b3673

  • SSDEEP

    6144:yWK3Z0WdRcm4FmowdHoSuNZgZ0Wd/OWdPS2LStOshOWdPS2Ll:TE14wFHoS/F5fC5R

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2