Extracted

• • Target

    2eca8440e9a026102856b1070a96afbd3ca84b5b79be156f4c5f975d48605535

  • Size

    64KB

  • MD5

    f3578b05f68db2d4f1d7e38d8de047a7

  • SHA1

    26f5ba81512595e5b3232a7f882daaa1af444d2b

  • SHA256

    2eca8440e9a026102856b1070a96afbd3ca84b5b79be156f4c5f975d48605535

  • SHA512

    faedd8c7f327bb0cae7c46d3c5d8d29772de29cbff756ed55ab118ba8f4b96ec6a10a18f97d67c60f9f2e319a232f785ab4e29172aceb7ed53f6f5299aa10e79

  • SSDEEP

    1536:rSewEus50FciYtw9iOpu8oXSQXUwXfzw9:rYs50FJi0mS0Pzw9

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2