Extracted

• • Target

    5ffdbb774dc1e5bfa4c0b3b09c2d4ee2ce1921333803bfcfec3a4e5cb49e120b

  • Size

    363KB

  • MD5

    fe3124f0e38e4430de80c6bc3b1e2a63

  • SHA1

    fe4a80e7157cc9f76c00ec6081a1c586a8599bc4

  • SHA256

    5ffdbb774dc1e5bfa4c0b3b09c2d4ee2ce1921333803bfcfec3a4e5cb49e120b

  • SHA512

    319cb45a05c3d80b2df97f9f7dacd63878f20df740164f23ba740cc20a7d0f122585be6467dd5a6d49b9daece35324b4b034b81ac6eea62c6ca6abd171aab833

  • SSDEEP

    6144:16mF432FVU5tTbVXksax8n5tTDUZNSN58VU5tT:AmFeMG5tP6sus5t6NSN6G5t

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2