Extracted

• • Target

    aa32975d6529703603e903b0cac4741a2adf3aeb456263bed7cd3dddc295e49f

  • Size

    346KB

  • MD5

    94c74148e913e4b6308269a16391cb67

  • SHA1

    235d3a05e3c3bd1b2082e18d46ae7c3b56a61209

  • SHA256

    aa32975d6529703603e903b0cac4741a2adf3aeb456263bed7cd3dddc295e49f

  • SHA512

    91e69f5571ec56c457e1bb1abcf674f61867c042d0d02982a7e47f2b78962e25ea14f5f0982a0eab38f2ce2e65a7f1121bd2f1595167117074933947e3614698

  • SSDEEP

    6144:dQ9vVODnuFzDhdsFj5t13LJhrmMsFj5tzOvfFOM:23ODWhds15tFrls15tz4FT

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2