Extracted

• • Target

    fe4690c54866e00b1da29709a41ece6c895e28320b7dce8672bbc5e382d6677c

  • Size

    64KB

  • MD5

    a7af5b8152b42181745600a4f9830451

  • SHA1

    e6326c3c4e836746dd1ba4dd7403ffd11924f5ca

  • SHA256

    fe4690c54866e00b1da29709a41ece6c895e28320b7dce8672bbc5e382d6677c

  • SHA512

    08e25252daafabb519dc4af89da802011b14397392d9136120640c6d98ca2b2e20b0c6bdbbc4ab6483b0558df341278084978de6b1daa16b01b1d13b4fab2be4

  • SSDEEP

    1536:PY0HM8InlTMAr/7ddS5QpG9WydrrPFW2iwTbWv:goIlTMG/pdS5QpoX1FW2VTbWv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2