Extracted

• • Target

    fd3aa46741d8d54ac0adf2d21b8a3a942f3be4c4fecb02098fe5437480a1aaad

  • Size

    64KB

  • MD5

    c064049ffa960056649c2daeb8017e83

  • SHA1

    59d26b72ed92bae02d9e62a2252b8c06de663d89

  • SHA256

    fd3aa46741d8d54ac0adf2d21b8a3a942f3be4c4fecb02098fe5437480a1aaad

  • SHA512

    325abe822750e35d8c8c093a5dee834085391531129138f1d30e8f9be0602427c91bd7027475448a478960f28266e7e2dbdfde93497cd4c8aa477923f7e35086

  • SSDEEP

    1536:PX4fHKyUNRjeLvN3GybqyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyWyybyyyyyyU:P8ysNKF7Pzw9

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2