Extracted

• • Target

    2d1e0677e6bc6e4f06a53f07f60dd60438184e473de18f7a419e1a34d68abb2f

  • Size

    395KB

  • MD5

    8a7bd4c5ceb2b3edc214801ab26e738c

  • SHA1

    ec0f920ecff85fb5b70af115fea13c3682c77bbf

  • SHA256

    2d1e0677e6bc6e4f06a53f07f60dd60438184e473de18f7a419e1a34d68abb2f

  • SHA512

    537c0c721d1ea2d8414a2b499adf6b3883956762ba9eb4980e1e84896085d5d65f875c3da85af867129b355e48a8b9e473a3ee2ba0a10a83ec4c5db4b9afd17d

  • SSDEEP

    6144:ReW45Ws4y70u4HXs4yr0u490u4Ds4yvW8lM:j4L4O0dHc4i0d90dA4X

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2