Extracted

• • Target

    2eb45c9e011937b5d47ba9de3283dda9c520edf21a8bd7978e209b3b7e2bfe20

  • Size

    64KB

  • MD5

    a15874ebea83cbdee4c10a30c220f87d

  • SHA1

    d82c55be24d472ab73d6aad856eecaef663a0526

  • SHA256

    2eb45c9e011937b5d47ba9de3283dda9c520edf21a8bd7978e209b3b7e2bfe20

  • SHA512

    4fe199c7b702834c5360a27a8326c84a3d8000a8181721fcda1a79a6e5b94cf49671914fbb82ff997527fc406909e0d983b0f47bbce3d8ff63459ea4cfb8dbda

  • SSDEEP

    1536:uAJR4V0SMZC+ny9RdiOpXh3OWy6YrPFW2iwTbWv:GSS6Ct9HiwXNOX7FW2VTbWv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2