Extracted

• • Target

    b9a5a23a0e5608400100ba892782610a665b80b98ea24a4cdc0b372543897962

  • Size

    395KB

  • MD5

    a5513ecb11333b54e0bf4dd0bc33f086

  • SHA1

    8345d1f3ec1051075023ad9cca0b7bc026b36b84

  • SHA256

    b9a5a23a0e5608400100ba892782610a665b80b98ea24a4cdc0b372543897962

  • SHA512

    83dae865f52971719d103f8d85907ec43c175e5cbaf73388daf7517fadd985137d7cd66ab1e997cde18a544b563e289a2a178462d7c5f9d3239bcc502f0a12a2

  • SSDEEP

    6144:0YoNhtrts4y70u4HXs4yr0u490u4Ds4yvW8l0:RoNhtW4O0dHc4i0d90dA4t

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2