Extracted

• • Target

    fae9e51f4b9be3a8e40b2d4494c4094acf1b19ead69354ee530fe837f7b02ffe

  • Size

    55KB

  • MD5

    51135bd4c4f5cd925acb127023492f4a

  • SHA1

    2ef36a46b55d39c55c4d867a2930f2210b092162

  • SHA256

    fae9e51f4b9be3a8e40b2d4494c4094acf1b19ead69354ee530fe837f7b02ffe

  • SHA512

    eef2016d29b13690e7f5133d1450485e63e7209dc49743612b07fd09bef1edfef3072f48020e1f98b27b4bde6e26d0148afc75bb9ab5694b7e536f991ca6da9d

  • SSDEEP

    1536:pGwgP2U9xyn/m0OJMLbNSoNSd0A3shxD6u:pGwbUSn/lLbNXNW0A8hhZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2