Extracted

• • Target

    ffaede333ad698084564323f01b31feff39d2c3ac4ca9f24dc5ef490316fdd2e

  • Size

    395KB

  • MD5

    b19ac82abed9369ff1c17b28149ac4b0

  • SHA1

    69c3ffe691fee73ae8499e38e5fe9793d36fa377

  • SHA256

    ffaede333ad698084564323f01b31feff39d2c3ac4ca9f24dc5ef490316fdd2e

  • SHA512

    d7016bfd7dc65e4a3164bc1156378f594976f3add074df2501f4e78449138567fa1b12aa1f25d9df18ee2b885d249b0c48088374551edf848ed3590774ad73dc

  • SSDEEP

    6144:F7Zp9hqRs4y70u4HXs4yr0u490u4Ds4yvW8l0:FX9hH4O0dHc4i0d90dA4t

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2